ffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="757375f8911fcbb46af0dc5d6c467af8"]) 03:58:59 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x387) bind$alg(r0, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="757375f8911fcbb46af0dc5d6c467af8"]) 03:58:59 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0xa00, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c) [ 918.762984] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 918.762984] program syz-executor4 not setting count and/or reply_len properly 03:58:59 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:58:59 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x387) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0xfffffffffffffd86) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x400000, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20040}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, r2, 0xc, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x264a}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffff8001}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10000}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000000)='\x00', &(0x7f00000000c0)=@random={'user.', 'drbg_nopr_sha1\x00'}) 03:58:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x80000000000000}, [{}]}, 0x78) [ 919.022427] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 919.022427] program syz-executor4 not setting count and/or reply_len properly [ 919.090387] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 919.090387] program syz-executor4 not setting count and/or reply_len properly 03:59:00 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x8dffffff}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:00 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x387) bind$alg(r0, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="757375f8911fcbb46af0dc5d6c467af8"]) 03:59:00 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x1400, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c) 03:59:00 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x387) bind$alg(r0, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='sha1\x00']) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'btrfs.', 'rng\x00'}) 03:59:00 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x6000}, [{}]}, 0x78) [ 919.604640] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 919.604640] program syz-executor4 not setting count and/or reply_len properly 03:59:00 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x6, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c) 03:59:00 executing program 3: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f00000002c0)) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x0, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0x49, "218d9607c65c8e88d64b20dbc179068a225767b8634385699b42d4f90b08d8a4c27a954220b1bd98016f1e7719b99b9a8ae40ec5c565f089f2e4d5dad102686bf799432b02da90dadc"}, &(0x7f00000000c0)=0x51) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000240)) lstat(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r2, 0xb8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={r1, 0x800, 0x2, [0x4b, 0x9]}, 0xc) 03:59:00 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x387) bind$alg(r0, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'user.', 'drbg_nopr_sha1\x00'}) 03:59:00 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 919.757863] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 919.757863] program syz-executor4 not setting count and/or reply_len properly 03:59:00 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:00 executing program 3: r0 = socket(0x9, 0x0, 0x10000000) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x2, 0x121002) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000100)=0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:59:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x1000000}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x387) bind$alg(r0, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(r0, 0x9) ptrace$getregset(0x4204, r1, 0x207, &(0x7f0000000200)={&(0x7f00000001c0)=""/41, 0x29}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000000c0)=0x100000001, &(0x7f0000000100)=0x4) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="757365722e647262675f6e6f70725f736861230d1002c16a54136f74d331006b7987748d8b7aaeb2d89a6cd2d594ad973872cd577ab3638666e775b8c541d9b9bb9a30c74b2c9b9698406a28746a8375bb4dbfa82d8b79222854c3644f5a0e841d8f1f26ab665a559a7b1506acdb06000000000000005bab0fe8ebe976c1000750"]) 03:59:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x500}, [{}]}, 0x78) 03:59:01 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0xd, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c) 03:59:01 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:01 executing program 3: set_mempolicy(0x8001, &(0x7f0000000080)=0x100003, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\a\x00\x00\x00ine\x00') readv(r0, &(0x7f00000013c0)=[{&(0x7f0000001080)=""/157, 0x9d}], 0x1) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x73, "18039b69c37d804040486754a9935775ddbb1b72c96a0e51aee736de0c32ee4162872fe3a2cae210dab7d697d62229ed97463fca1428e064508e431cf44018754be8af2263d99d891df0ed502255e5f09c9e6b4bc820fb07f9ded2faadd9eff2789c5812f0dbe715506dee038acc6dff7c784a"}, &(0x7f0000000040)=0x7b) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={r1, 0xf1, "1f0c6e41b85c0d62b2563e0168982371983bad2a39ca3f9c89ca80abdfa4f00ff65ea5995c49de808d3913de84b5142df7673388b0006c25393667487ba5d3a4b49e6dd77a2956ba38dbc0ede4bfb40eb3a165179d56b0a59220adda4e5645c2621ec6af8e166eece16e684d4fec97439c30abaa1253af25056d51399995f5b089259af2a975e4e52e964ab59950639ac61422105ddbb6d68d211b18108d5947a4d35f9d3577d2115f4888d383fa04bc89cd3a6ab2fb9dc423e40291ee537413049d71be9df364ab0039b72101431ab303bcb746a65f79aab4b71fe1ba2b3b7e6003b3330e02dfede65fba15850563ba86"}, &(0x7f0000000240)=0xf9) 03:59:01 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x11, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c) 03:59:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 920.526768] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 920.526768] program syz-executor4 not setting count and/or reply_len properly 03:59:01 executing program 3: sched_setaffinity(0x0, 0x4, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB="9900000036d4b6f24fd644c18311c35a5f07087181c7c62a61f1761c840c9aba96cd14dca98075338f2c9cb74adb841257e1f643e2654603f1cebccb269d0a8dfc5df37d08e3dc8cb5a23f718631382cfd4f624d372c0137a91e25c01bcf94762bf8eb9a658bc8eaa2a1050fdb1c34313fea230e743540523bc3ab01ce64489e67ee6b130a1c00000000"], &(0x7f0000000740)=0xa1) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000100)={'TPROXY\x00'}, &(0x7f0000000140)=0x1e) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000780)={r1, @in={{0x2, 0x0, @remote}}, 0xb, 0xfffffffffffffffc}, 0x90) listen(r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000440)='vegas\x00', 0x8377c82a1d841f) sendto$inet6(r2, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0xff000000, @empty={[0xe00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9050000]}}, 0x1c) r3 = gettid() timer_create(0x5, &(0x7f0000000000)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000044000)) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002000)='/dev/dsp\x00', 0x200040, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000004c40)={0x0, @in={{0x2, 0x4e23, @broadcast}}}, &(0x7f0000004d00)=0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000004d40)={r5, @in6={{0xa, 0x4e20, 0xffffffffffff7fff, @mcast2, 0x100}}}, &(0x7f0000004e00)=0x84) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) ptrace$peekuser(0x3, r3, 0x401) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x41, 0x0) sendmmsg$nfc_llcp(r6, &(0x7f0000004ac0)=[{&(0x7f00000001c0)={0x27, 0x0, 0x1, 0x0, 0x400, 0x0, "4ee888149a404ca19f468ab563568f7673ad9291b4cf05e476523d1447065f32522efa8080d760ff86f92fa54d0b5fdf629f9508dd6e54ecc2b75289a538ac", 0x13}, 0x60, &(0x7f0000000600)=[{&(0x7f0000000280)="7b2ddeef13b5686d22e5b0ca4fdfc469063218f4f8692296852c6f1307083e90732ccac32912fb0510ed6fa8d9b393f9c378338eb38c1dbe251cfe3d38cb0b166026375db943ebc134b44bdeae92d3a3e107a914074b2ef1c605eeb00688ce762ae9ac4d3514ec2f1093ef9e21c107614e754c170a5f7f6a0636b3af5fd1bb22d72b3d0868d6afae67dde0b39ef3183bbb8f175eef7fd13c5ac5b0bd75e9e81487", 0xa1}, {&(0x7f0000000340)="b7aad935666874fadee52ba0e09f24f65113c0caf71155d9f19b697707f3be9d1d069d1497162a082c2d0f0894d9a2fa9a2ba61f58a5e464f40b51c88cd7a93cb7e857ec21a4f565bc8f95d0afc9f6b1a525f484aff3e39445e10eddd06216fe80514f1d469f7faeb2b99d5374ff27e3ac9d82a3d8d4e04e8f72c4c7fbf5858d07fc0794542220d4be0741f6b17470e5772ccfb24cb74ce9528e6ab2db7ea46f0c1390d0f1331ede2b1f2bc62be52c9b183f2ff366cc14e941916922190b1c025be6fac28ab7e2085850bc302cc5325af8ace2bdab77542ce632d5", 0xdb}, {&(0x7f0000000480)="8a4f", 0x2}, {&(0x7f00000004c0)="4a46ef888e1ed7c5959115e979fb4b38694d6c9c810ea57c0ef3f3af4d3b7357d3a13e5e380e73ca0e56c4c25aba7879b4c7f62784aa01323854d438eb3a0ef0bcb367d59dca92c7b5101e4c9eee26d41eab6c3490e7540a1a6ade9b2a64a3febbcea9f59516a149548794eaa0787e774537c4c8a2b49d824f34f10c56cf0a056983d940ecdc0f0eb34528bdba7ece39d732e0e0cb4f51", 0x97}, {&(0x7f0000000580)="d855b659204b15348c", 0x9}, {&(0x7f00000005c0)="05c502dc42fbe5bf5a2b0214d5f981d34401719cff80cfc4d9cc64ba2926a1d61445bd3c81b650ebcabcfbd7ced47834f7c1", 0x32}], 0x6, &(0x7f0000000840)={0x78, 0x10f, 0x81, "c905fb705432ff146c7e7d80effacaea1196e12f5cf6895b6df3b2f3aa1a1f2de0792b98d565913edc3397bc67452dc15a2aed26bcc873a2bde70d6d1d994b4a14e1495e159d08b79969651dd88fef64c1ddeaf4f80312f76ea7a78a47b7954845b262"}, 0x78}, {&(0x7f00000008c0)={0x27, 0x1, 0x1, 0x7, 0x9, 0xffffffffffffff00, "e059807e676b7ffeb5d1d2eb6fa24b52b3ddadacbea687e03d63ef59e75d6a8fd5fd7bd9b23187458615a604c5dac11be3d0ee5ce90df95f599402acd2efe2", 0x19}, 0x60, &(0x7f0000000b40)=[{&(0x7f0000000940)="7fb2ce17464ca6093bb6106814b03a92b025f4b95e7c589ebe6b83e4f1151f527f37a13be8029b567c8632d24a36a51bee81ddd2248526b96526d68ecdf665dac007117412d1a20fce88f1528d92a4ccdb00883ca6feaaf70472bb4a2c071679d49d516c0389f0852458e085f1180be8638ce2ecda743a32838cdc7e03636a32a0639e942c", 0x85}, {&(0x7f0000000a00)="9847b57d0d16b92a5e0ba3516452029be37b7a1a0f948338f0021be304bfe57af5350c341b45b4cac72200ad0722a8980e2e78000e84ba59d078ff01098197dfb776df490d0b9594452a1bc5077bd4d53069a8b91892382744226b5a4b896451777dc44ffa9734f2a3b30196398e3d22edd1610479c4729dd73793e1bb0d4eafae06393bd855e5c426f831455c7d116fabef5393b849a146e97f30f923e255988a9a7a9197373edd0dfe06da131ae37b22ccd832fa540efbd247a2", 0xbb}, {&(0x7f0000000ac0)="12ca9f982c9b90a93860bf7f613c7726a79c91a1cdf2c32991249ba0da54a16028d098da8601086888cdc9c0680d67db57c4fd584fa12ce523e028b30d8f3db38bd1964c92d7ee58956a460ce11b141cea9fa5a9de96ad6a0c", 0xfffffffffffffd24}], 0x3, &(0x7f0000000b80)={0xf8, 0x12b, 0x5, "f91576cc36b3a06b04133c5060f95ad70e286d85090e1b24bcf4e32210c15f2421c2106ae1641fe21187447853c93d050ea88cb4d1c3504e32691d751c0a3ac533246990dbe3513df07b86e50279eedbe55ba71851d6d2361b5df471d2f1ca2347af29816d743a3b8cb51b2d05ef0cab415466714ae4230a2ad01533d091f7a7a389a4540f05f69ebc08ca11df01a73d3b03b8ce19eaab0177cc881c2b32c7fc00e0ebb447e1cda2720262901cfaec6a2fb8138d97a8881e30e253a10ae2a2febc4249905938d1f9ffe63c1cbe771728ba08056bfc500f0232d44b2f2a9ad7d201116206"}, 0xf8, 0x4000000}, {&(0x7f0000000c80)={0x27, 0x1, 0x1, 0x5, 0xfffffffffffffff8, 0x8, "ef067294850f21adc95eceb2c7393a3c90f1286b1cd6521266bf72b44f71e38256573f81bfa11324c956c126aefe0e54f59ea9cff9f661dff72f6cb32f0636", 0xa}, 0x60, &(0x7f00000020c0)=[{&(0x7f0000000d00)="8573e0a337b8e6b1921a1dbfa3a6ad7da7c558f97bce298b6d71e175857c1827298377f6d21b43", 0x27}, {&(0x7f0000000d40)="12faa240877e82365260f8df5a39beece8242fcee7ab0faf5b8f5bef33858e61da98dc2fdfb7b9645378e924649eea20a5f73a9ad7187f9602ef1c5221099ccbf550d22e55b044d3f3269a8ddcd2a634c32b4445a5c17a8a7c1b26928981b6ad55af5505c7060b45106bf37d54a1246224efe5ced35904", 0x77}, {&(0x7f0000000dc0)="272e0b8923086b0806b4f1d5d394f81a9454bd5af589c095ba75d2881e62aa067cc09f4c1b8717893696278f1ad5a0169455ee81bbbe02373547e826c1dfaf960d27ed8c13968f6cba339dce07c9132a3f944453ad90a3cbec3ab438b2854b458375b4dada3e431098d374f15e38134ca74af436118b74f5cdcb133286b6e17db56fb24c9b2ed10597478c82", 0x8c}, {&(0x7f0000000e80)="5907595fbc7fc4b417094acc3c504586a09261fcd056c827ae5854387887f301987fd7751888084fb67d37d6f709903789944619d570dcebc83feac35985f3d03e7bd26d4f0e8cd8a0922695c6fb29f6fe506aa30fa2382c6bcecde9f9d17f811bd72e5c9b61b85593eb59be961ff6f111e2bf0671cc572a21efc6b988a0e6fd11fe2a919ba51df5d638bec77f6c7b1d164b77a75f65d72cbe52fcbf62e25733a40563", 0xa3}, {&(0x7f0000000f40)="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", 0x1000}, {&(0x7f0000001f40)="dc67313618a6b334e870b20334a4657005121fb271a238120039c0a5ee9d013a8486ae282be220a3a128fd749c3adbf584b213669e31af8f473ae6ff179255c7071e8c3e5761e036a17d334071accc2d2af7651f748f48759e661c9a1ba669ab4646b7195c6863f51b3cef69237287651f54e9ca4cd41daa9701604b6b7cc436b4cb730f2fe61486ded2ef62b04f39477724041474dc1a5aad58e4eba47b6e5e5fa554f1fa680448a48dba7c38e64265549567be5756b7db096a4206232f3d", 0xbf}, {&(0x7f0000002000)}, {&(0x7f0000004ec0)="ac83f16e5c3d78f1e021bafd473cc89c071475311b14a9ff81669b4617ca63ff4d3943394f4744bfd4e3959e56ad30915c6522f739ea5b06bd5502a84a748cca30ec9e8f134429a960d4c156748ecd2c82524083040c5c2c245b2955a14fbd8055e99a52c5e0", 0x66}], 0x8, &(0x7f0000002140)={0x98, 0x10c, 0x4, "7e57ad09c666d0448bdd8c900851c05bd7d0cf3f5d524286ee6e770a2e89790b44a4cd4a3ccc27f2feadcba6f74feb06d8e31fff3654b2ebbf072986ee25b69532841d6898f60f01095cc2fa1fc2db6740c2f225d326d337b50e0b684000558c9ae1521b81a28bebda15d06b22c6f53dd2c27340946348fa9db60ff9f5df39ce5da191a6"}, 0x98}, {&(0x7f0000002200)={0x27, 0x0, 0x0, 0x6, 0x6, 0x7, "0a26561b4fdea4cdabe0f75a61eb3d4571e7c22a0749ca785435166ec2755cb3ca7e86202057bc5868d15262c81c2782365709e94ef7a9a4e5ed0a0fa674cb", 0x14}, 0x60, &(0x7f0000003600)=[{&(0x7f0000002280)="ad4f6adc02a1c07c4317e80cadca11cd7df2a3f653b3723df3ef0cffe2bc53d41dee0a484a9074355cfc01c4b190441f6cf71e3745cad5a840462f2c402c14804d71708d6304bfeb5969f12419d91ce0a525f2b426438ed8af1908d639d4ad1bdd3531ebf68e0ed560bef38bf787fdd924eab928ffbc2d98a6986235c23b5f855bf24f5818040d358b97", 0x8a}, {&(0x7f0000002340)="70288fdbb009b2a6e4fdc71252479dc378de811056d5dc16fd987ac850a543ea16085dabcdc9453a62b55890682825ba08d224d672633bdd824b5a30c4bbbe275938db450667aba4d08d171c01b2cfc0f9c3d0eafa5c9f181f14eddf78ad7434713b9569ec4c652b8ec8894eb4a32d96544a47889855ed576b624cf23c2d4ed6bc466534add0d17748b88adf4264224fe71a58113dc7868cf10a206e844b7122daf53d2f23ac604bf2dae8c2262ced6341a4", 0xb2}, {&(0x7f0000002400)="58f3f99c3e64766dc8826dc33121dd7a95ccb6b8a5", 0x15}, {&(0x7f0000002440)="bfdbbf6c9efdd0f0a4a35f9e1cf3f4d69d862de7dd7381ad79bcc9831e1727211acb5bc6c75b2b6670a79776c75b2120a3a6d990859c5183e54e05e4ab0584779d2e21d2705fe48e9cc9bacf6aebedc9e77a21e1e177771f58df38d8f8b83da4b7e506dc3cdb837e047e5445cbf559e5f4c3070c2354c7625e3d51adee6d2125018d819b9acd3e8e010462b3ca82f656d00f70529ff6333fab3ae3aa1d18be06b72c7a30d19de1ebf0fa4f100f01cb5fe7cd2dcac80c5b8a2e6014ad86b12b9609d92fcd17a85071f242b83a73c0d4aabbb9576555dcce6ef092", 0xda}, {&(0x7f0000002540)="2b772bddb442753dbe5a57a6e2b755dc28df", 0x12}, {&(0x7f0000002580)="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", 0x1000}, {&(0x7f0000003580)="ef99cf64c824bfd614d92fa026f359da711f56a104f539b8c26ac51fa5c14999ee970c87b105db7f50536e9a7dac385c94b52045b5bdfe2b2b749e22c4cbdb4a2533b08ce31d54592331bed096d851d64cc0ac", 0x53}], 0x7, &(0x7f0000003680)={0xe8, 0x103, 0x7, "fa8a7fc50d280a7eac437bc0277a057b99fedc066cb77b1172a0eddf6a58fb84e813da5269bf9d3e65950d99bb9e561ab8113a8c8f1a9f83407186165083c6214c6b2af3c1426c3ec1376264f0b5da6ea941e2a281d7f6d4b13dad08a97b6a476fd340a2053e56af95d76465d7cf3f7f066c89a2c439ed054958e2ba95f23cf4924d3a8a1396997d721e3efdbdffaef6e26cbf5b45d9cbbcc51a52317ecf95d89e20ed497a1dc735ca8a8d53977a29f7ea90de9096b5a3449719104ebb791982a2afa3c0a7295407efa24c31479170e81cd9"}, 0xe8, 0x200080c0}, {&(0x7f0000003780)={0x27, 0x1, 0x1, 0x1, 0x10000, 0xaa4, "7e6220021d52969c6b3dd9170f1d3a9c964d0356150ecef14926d6f5268a9acf274f492f593d3683a54bc31909bc7d974c689a4eac092556e6901060639400", 0x16}, 0x60, &(0x7f00000038c0)=[{&(0x7f0000003800)="2f72326fd09fbf0451654a80bcf3b1242600503cdf637c74e743ff2b024d77745d2055f94adc7840a6eaa48074ae23eb5f7f73ff6bb3e2877132e539f23f0286b3201f2440489485370ca98e992bfd158219abdc344d2a56d1487fcdbe6cb73fc137e350fa9f4ffd1bbb2fde2a16509db8ceb8bd", 0x74}, {&(0x7f0000003880)="1aaaa0da4acec16113e494aa", 0xc}], 0x2, &(0x7f0000003900)={0x48, 0x100, 0x400, "fe2e887c3ddd4c5d1892affb1d3b7793c7753d2b9d1283f9b4afb309dc7d8c941e91a661b329c900dc4133fcd2cd149155"}, 0x48, 0x1}, {&(0x7f0000004e40)={0x27, 0x0, 0x2, 0x0, 0xdab, 0xca86, "3dc2cdf667b5d2eca3ea01801834e8f2366f2c652af72f590673732db4bcb831c535e32037ae6ace8ddd0b8a45466055b104d52360d4ff8200da2fa4ad94b8", 0x1e}, 0x60, &(0x7f0000004a80)=[{&(0x7f0000003a00)="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", 0x1000}, {&(0x7f0000004a00)="6d1d1028ba719f8ae4ef56ad23f13b38cac3fe444e27ba32214431c2e9161e87f5f63198aac1e28c42aea4f1824af971c2182e439c8a", 0x36}, {&(0x7f0000004a40)="b7", 0x1}], 0x3, 0x0, 0x0, 0x4}], 0x6, 0x81) tkill(r3, 0x401104000000016) 03:59:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x387) bind$alg(r0, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'user.', 'drbg_nopr_sha1\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) 03:59:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x60}, [{}]}, 0x78) 03:59:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 920.824471] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:59:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0xffffff8d}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:01 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c) 03:59:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x387) bind$alg(r0, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='user.drbg_nopr_sh1\x00\x00']) 03:59:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x700000000000000}, [{}]}, 0x78) 03:59:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:02 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x8000a0ffffffff, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c) 03:59:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0xa0000000}, [{}]}, 0x78) 03:59:04 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x3, 0x240000) write$P9_RFLUSH(r0, &(0x7f00000003c0)={0x7, 0x6d, 0x2}, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000900)="173074fb8c62c7934719212e2502da2d2f2a5736bcec670f5da0de3b165e6999d4d12b2a1bf0c14ea0a482a6a489facd33e339ac", 0x34, 0x7fffffff, &(0x7f0000000340)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) syz_open_dev$sndmidi(&(0x7f0000000300)='/dev/snd/midiC#D#\x00', 0x7, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) getrlimit(0x4, &(0x7f0000000b00)) r3 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x3f, 0x200500) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f0000000940)) accept$alg(r3, 0x0, 0x0) gettid() recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000040), 0x0, 0x20000001, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) sendto$inet6(0xffffffffffffffff, &(0x7f0000000880)="7116976428203587543bbc1562b772328507b45f649b278def9a0759738087a5d38c0172c5b11f32cfe1490600860cf613aaae2bb333590dcb6f20e4c6f1b04e62832c521f249fc69a8f2a36762f9f454b568187edba3e371c", 0x59, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x45a) write$binfmt_elf64(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0xbbb) ioctl$RTC_UIE_ON(r2, 0x7003) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000000280)={{&(0x7f0000000a00)=""/244, 0xf4}, &(0x7f0000000200), 0x20}, 0x20) 03:59:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x387) bind$alg(r0, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'user.', 'drbg_nopr_sha1\x00'}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@rand_addr, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f00000002c0)=0xe8) setresuid(r3, r4, r5) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000480)={@mcast1, r2}, 0x14) 03:59:04 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0xf00, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c) 03:59:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x7a000000}, [{}]}, 0x78) 03:59:04 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0xeffdffff00000000}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x387) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0xffc1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'user.', 'drbg_nopr_sha1\x00'}) 03:59:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x387) r1 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x800) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f00000001c0)=0x2, 0x4) bind$alg(r0, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000100)={0x5, 0x6, 0x3f, 0x8}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'user.', 'drbg_nopr_sha1\x00'}) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200), &(0x7f0000000240)=0x4) getsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f0000000280)={@remote, @broadcast, @multicast2}, &(0x7f00000002c0)=0xc) creat(&(0x7f0000000140)='./file0\x00', 0x80) [ 923.932303] sg_write: 7 callbacks suppressed [ 923.932320] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 923.932320] program syz-executor4 not setting count and/or reply_len properly 03:59:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:04 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x7, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c) [ 924.044545] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 924.044545] program syz-executor4 not setting count and/or reply_len properly 03:59:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x600}, [{}]}, 0x78) 03:59:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488d") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 924.346434] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 924.346434] program syz-executor4 not setting count and/or reply_len properly [ 924.386922] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 924.386922] program syz-executor4 not setting count and/or reply_len properly 03:59:05 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x2, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000480)='/dev/input/mouse#\x00', 0x351, 0x6002) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x6}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x200, 0x0, 0x0, 0x1f, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f00000003c0)}, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000b80)="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") ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000800)={0xfffffffffffff800, 0x73e}) chdir(&(0x7f00000002c0)='./file0/file0/file0\x00') kcmp(r2, 0x0, 0x5, r1, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000240)={0x0, 0x1, 0x6, @local}, 0x10) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000540), &(0x7f0000000640)=0x4) getpid() write$P9_RSYMLINK(r0, &(0x7f0000000440)={0x14, 0x11, 0x2, {0x20}}, 0x14) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) 03:59:05 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x387) bind$alg(r0, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="757365722e647262835f6e000000000000000000"]) 03:59:05 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x12, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c) 03:59:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x3800000000000000}, [{}]}, 0x78) 03:59:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488d") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0xf0ffffff}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:05 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x8, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c) 03:59:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488d") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 925.112440] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 925.112440] program syz-executor4 not setting count and/or reply_len properly 03:59:05 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x387) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000000c0)=0x8) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc-aes-aesni\x00'}, 0x58) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000100)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'user.', 'drbg_nopr_sha1\x00'}) 03:59:05 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x400000000000000, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c) 03:59:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:05 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x2, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000480)='/dev/input/mouse#\x00', 0x351, 0x6002) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x6}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x200, 0x0, 0x0, 0x1f, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f00000003c0)}, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000b80)="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") ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000800)={0xfffffffffffff800, 0x73e}) chdir(&(0x7f00000002c0)='./file0/file0/file0\x00') kcmp(r2, 0x0, 0x5, r1, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000240)={0x0, 0x1, 0x6, @local}, 0x10) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000540), &(0x7f0000000640)=0x4) getpid() write$P9_RSYMLINK(r0, &(0x7f0000000440)={0x14, 0x11, 0x2, {0x20}}, 0x14) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) [ 925.270580] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 925.270580] program syz-executor4 not setting count and/or reply_len properly 03:59:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x2000000}, [{}]}, 0x78) 03:59:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x387) bind$alg(r0, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="757365722e647262675f6e6f70725f7368613100a22575614e633336e27c1ebfe19e19e2ba7793ffaeaad313571613df8a4ffc2a42aeaf7863bf013c132cc97714ed07806bf81de677ab935a233a40d8ae7aa65fb594a519d513268e78afd97d1889a2ad6f825f74606dde36397d3b55949fe29cf01b4547a4161fc26d62153f6f4d86b71d59962e6d4fab777db87f8d5e09d64b8e59daf913a62dafc27554b377d2b0c49556abf92c9184e24932079ee10febc63e7781dd4269b0fa19ac0994063d6604c43f4b755002dbcfc18da3ec47f7b511bf8d0b09cd96ef"]) 03:59:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:06 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0xffffffff00000000, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c) [ 925.503494] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 925.503494] program syz-executor4 not setting count and/or reply_len properly 03:59:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 925.710907] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 925.710907] program syz-executor4 not setting count and/or reply_len properly 03:59:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x3f000000}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:06 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x2, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000480)='/dev/input/mouse#\x00', 0x351, 0x6002) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x6}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x200, 0x0, 0x0, 0x1f, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f00000003c0)}, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000b80)="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") ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000800)={0xfffffffffffff800, 0x73e}) chdir(&(0x7f00000002c0)='./file0/file0/file0\x00') kcmp(r2, 0x0, 0x5, r1, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000240)={0x0, 0x1, 0x6, @local}, 0x10) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000540), &(0x7f0000000640)=0x4) getpid() write$P9_RSYMLINK(r0, &(0x7f0000000440)={0x14, 0x11, 0x2, {0x20}}, 0x14) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) 03:59:06 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0xa, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c) 03:59:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x387) r1 = open(&(0x7f0000000140)='./file0/../file0\x00', 0x40, 0x2) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000180)=0x2, &(0x7f00000001c0)=0x4) bind$alg(r0, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) r2 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'user.', 'drbg_nopr_sha1\x00'}) 03:59:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x3f00}, [{}]}, 0x78) 03:59:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:06 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x18, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c) [ 925.947830] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 925.947830] program syz-executor4 not setting count and/or reply_len properly 03:59:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 926.030726] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 926.030726] program syz-executor4 not setting count and/or reply_len properly 03:59:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x12) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="390000001300090468fe8000000000000000ff3f0200000045000116000000141900040002000700efff0100000a00005d14a4e91eeb08d2fd", 0x39}], 0x100000000000006d) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)) 03:59:06 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c) 03:59:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x387) bind$alg(r0, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'user.', 'drbg_nopr_sha1\x00'}) r2 = msgget(0x1, 0x1) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) getgroups(0x1, &(0x7f0000000180)=[0x0]) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = fcntl$getown(r1, 0x9) r8 = getpgid(0xffffffffffffffff) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000400)={{0x9, r3, r4, r5, r6, 0x109, 0x5}, 0x401, 0x8, 0x7f, 0xffff, 0x7ff, 0x0, r7, r8}) 03:59:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x2000}, [{}]}, 0x78) 03:59:07 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x10}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:07 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x3, &(0x7f0000000100)='..\x00', 0xffffffffffffffff}, 0x30) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x1000, 0x0) ioctl$BLKFRASET(r2, 0x1264, &(0x7f00000001c0)=0x3) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x8000) getsockopt$inet6_dccp_int(r3, 0x21, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_tcp_int(r3, 0x6, 0xe, &(0x7f00000000c0)=0x7, 0x4) 03:59:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x10}, [{}]}, 0x78) 03:59:07 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x387) bind$alg(r0, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0xffffffff, 0x100) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x8001}, &(0x7f00000001c0)=0x8) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x0, &(0x7f0000000280)={@remote, @loopback, @dev}, &(0x7f00000002c0)=0xc) r2 = getpid() mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc002, &(0x7f0000000380)=0x3ff, 0x0, 0x7) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x7, 0x7, 0x40, 0x8, 0x0, 0x8, 0x4, 0x1, 0x5, 0x2, 0x8000, 0xe3, 0x81, 0x10000, 0x7fff, 0x8cdb, 0xef, 0x6, 0xffffffffffffffd3, 0x8, 0x10000, 0xfffffffffffffc00, 0x1, 0x8, 0x7f, 0x9, 0x2, 0x401, 0x1, 0x6, 0x1, 0x7, 0x9, 0x2, 0x2b3, 0x4, 0x0, 0x800, 0x0, @perf_config_ext={0x20000000, 0x7fffffff}, 0x40, 0x200, 0x7, 0x0, 0x1, 0x2, 0x80000001}, r2, 0x0, r1, 0x2) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="75850e722ed6ad00005f6e6f70725f7368613100617c2c7bb6f53e9eec9417c7455db1664c7a9e8de707b579ad761f8d1bdbccdacb8b50bdc019ba85d86716c56b63fc7ddebddd86bd1687bd617f766c2d5dbce7983a91f8c0cee698148ee6a60418bcb71e0626c970db285d1df0dd1a13e7387d6d772651dad7e2e590032d04d3d795891273b8fc4e746b70b6086b25cd96d8db4a5a16835f8990cf97347aa83ab0e6f2fa439a7a9ee9c2abe5f4a9d691a10b1de565241b2105e9d0443bad47d21fcf"]) 03:59:07 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x14000000, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c) 03:59:07 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0xd000000, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c) [ 926.857192] sctp: [Deprecated]: syz-executor3 (pid 14431) Use of struct sctp_assoc_value in delayed_ack socket option. [ 926.857192] Use struct sctp_sack_info instead 03:59:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0xa0}, [{}]}, 0x78) 03:59:07 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="92c556810173de354e125d6208582b1190a0373e4dd29c16e98f5079e501792760b00be1844d637dc78e945c2683942d2d0878b93698425359d2dae0e0469c41da0da5a64863faf07abc9542af0cd57e40533a44c54052c4a7f7167db09f1f0c2c3b892fb1", @ANYRES64=r0, @ANYRESHEX=r0, @ANYRES16, @ANYRESDEC=r0, @ANYRES64=r0, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX, @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="01a2da74f584e85b22fec593427805d0d8a388ff1dbb2ab10579d772c399d3e7e4529749acfc4631eb71a0dbfccd21b40c5af14d912e386e0ae177f5ea94205b1382be515b4300b43d43ea628656008803722b465780522760db03eac021441b72463587cc7064891ef3c688d8640fb36c8cb1582784a636d285dfa84f689a194e9a5612791d5c0e5900f35afea4e0969262f30599be5d47c5c48b949cd86e38c053260876fc0a2848837426c40c0b2ef7a853a3a40a4d1d72926d6e5e787eda716a3198581f3f76c6922b40d20059c7d56c263846ebddf1d9cb809a582eac033b84fff6a606"], @ANYRESHEX=r0]], 0xffffffffffffff85) bind$alg(r0, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) 03:59:07 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0xb00, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c) [ 926.985121] sctp: [Deprecated]: syz-executor3 (pid 14436) Use of struct sctp_assoc_value in delayed_ack socket option. [ 926.985121] Use struct sctp_sack_info instead 03:59:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x0, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:08 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0xf00000000000000}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x2000}, [{}]}, 0x78) 03:59:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x0, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x7}, [{}]}, 0x78) 03:59:08 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x387) bind$alg(r0, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0xfffffffffffffde3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.opaque\x00') 03:59:08 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x5, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c) 03:59:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x0, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:08 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x500000000000000, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c) 03:59:08 executing program 3: futex(0xfffffffffffffffd, 0x7, 0x0, 0x0, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4000, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x1a67c533) 03:59:08 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept(r0, &(0x7f0000000140)=@nfc_llcp, &(0x7f00000001c0)=0x80) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0xffffff01) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x80000019) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'user.', 'drbg_nopr_sha1\x00'}) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) 03:59:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x6c00000000000000}, [{}]}, 0x78) 03:59:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x0, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:09 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x387) bind$alg(r0, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x4000, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'user.', 'drbg_nopr_sha1\x00'}) 03:59:09 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c) 03:59:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) clone(0x4002102301ffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000140)) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x8000000}, 0x14) 03:59:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x7a00000000000000}, [{}]}, 0x78) 03:59:09 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x4000000000000000}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x0, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x0, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:09 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0xf000000, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c) 03:59:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x100000}, [{}]}, 0x78) 03:59:09 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x387) bind$alg(r0, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x4, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'user.', 'drbg_nopr_sha1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xb, 0x8000, 0xffffffffffffff80, 0x75c3, 0x10, r1, 0x3}, 0x2c) 03:59:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:09 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x387) bind$alg(r0, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='qseo.Z|bg_?\b\x00\x00\x00 \x00\x001\x00']) 03:59:09 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x2000000, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c) [ 929.002809] sg_write: 13 callbacks suppressed [ 929.002824] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 929.002824] program syz-executor4 not setting count and/or reply_len properly 03:59:09 executing program 3: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x204, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000580)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) r3 = gettid() getpid() gettid() fcntl$setown(r1, 0x8, r3) ptrace(0xffffffffffffffff, 0x0) semget(0x3, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f00000006c0), &(0x7f0000000180)='./file0\x00', &(0x7f0000000740)="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", 0x1002, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000001d80)="dcd8bdb7ef62f3f700000000000000000000", 0x3080, &(0x7f0000000440)="fa3a51c0858bc666b01dc16b56bb5cb284f8fc67dc7859972aabffff686dc7e71f02bf71b9602a0000b33fd2683a820cbbb4e492b5") mount(&(0x7f00000006c0)=ANY=[@ANYBLOB='/dev/nrd0\x00'], &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='ubifs\x00', 0xfff, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x0, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x1, @mcast1}, r4}}, 0x30) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000480)={0x80000000, 0x7ff}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000600)={0x0}, &(0x7f0000000640)=0xffffffffffffff59) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000680)={r5, 0x3, 0xa7e}, 0x8) recvmmsg(r1, &(0x7f0000001e00)=[{{&(0x7f00000008c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/124, 0x7c}, {&(0x7f00000019c0)=""/44, 0x2c}, {&(0x7f0000001a00)=""/128, 0x80}, {&(0x7f0000001a80)=""/124, 0x7c}, {&(0x7f0000001b00)=""/213, 0xd5}, {&(0x7f0000001c00)=""/23, 0x17}, {&(0x7f0000001c40)=""/105, 0x69}], 0x8, &(0x7f0000001d40)=""/24, 0x18, 0xc59d}, 0x81}, {{0x0, 0x0, &(0x7f0000001d80), 0x0, &(0x7f0000001dc0)=""/5, 0x5, 0x7}, 0x401}], 0x2, 0x0, &(0x7f0000001e80)={0x77359400}) connect$packet(r2, &(0x7f0000001ec0)={0x11, 0xff, r6}, 0x14) mount(&(0x7f0000000380), &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) rseq(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)=0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240), 0x4) 03:59:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:10 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0xf00}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:10 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x4000000, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c) 03:59:10 executing program 3: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x204, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000580)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) r3 = gettid() getpid() gettid() fcntl$setown(r1, 0x8, r3) ptrace(0xffffffffffffffff, 0x0) semget(0x3, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f00000006c0), &(0x7f0000000180)='./file0\x00', &(0x7f0000000740)="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", 0x1002, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000001d80)="dcd8bdb7ef62f3f700000000000000000000", 0x3080, &(0x7f0000000440)="fa3a51c0858bc666b01dc16b56bb5cb284f8fc67dc7859972aabffff686dc7e71f02bf71b9602a0000b33fd2683a820cbbb4e492b5") mount(&(0x7f00000006c0)=ANY=[@ANYBLOB='/dev/nrd0\x00'], &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='ubifs\x00', 0xfff, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x0, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x1, @mcast1}, r4}}, 0x30) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000480)={0x80000000, 0x7ff}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000600)={0x0}, &(0x7f0000000640)=0xffffffffffffff59) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000680)={r5, 0x3, 0xa7e}, 0x8) recvmmsg(r1, &(0x7f0000001e00)=[{{&(0x7f00000008c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/124, 0x7c}, {&(0x7f00000019c0)=""/44, 0x2c}, {&(0x7f0000001a00)=""/128, 0x80}, {&(0x7f0000001a80)=""/124, 0x7c}, {&(0x7f0000001b00)=""/213, 0xd5}, {&(0x7f0000001c00)=""/23, 0x17}, {&(0x7f0000001c40)=""/105, 0x69}], 0x8, &(0x7f0000001d40)=""/24, 0x18, 0xc59d}, 0x81}, {{0x0, 0x0, &(0x7f0000001d80), 0x0, &(0x7f0000001dc0)=""/5, 0x5, 0x7}, 0x401}], 0x2, 0x0, &(0x7f0000001e80)={0x77359400}) connect$packet(r2, &(0x7f0000001ec0)={0x11, 0xff, r6}, 0x14) mount(&(0x7f0000000380), &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) rseq(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)=0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240), 0x4) 03:59:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x68000000}, [{}]}, 0x78) 03:59:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3, 0x20000) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x387) bind$alg(r0, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'user.', 'drbg_nopr_sha1\x00'}) 03:59:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x32, 0x829, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) [ 929.622391] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 929.622391] program syz-executor4 not setting count and/or reply_len properly 03:59:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x32, 0x829, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 03:59:10 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x8000a0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c) 03:59:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x387) bind$alg(r0, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) socket$bt_hidp(0x1f, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'user.', 'drbg_nopr_sha1\x00'}) [ 929.773649] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 929.773649] program syz-executor4 not setting count and/or reply_len properly 03:59:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x3800}, [{}]}, 0x78) 03:59:10 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0xc00, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c) 03:59:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x32, 0x829, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) [ 930.024174] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 930.024174] program syz-executor4 not setting count and/or reply_len properly [ 930.123317] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 930.123317] program syz-executor4 not setting count and/or reply_len properly 03:59:11 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0xf}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x68000000}, [{}]}, 0x78) 03:59:11 executing program 3: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x204, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000580)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) r3 = gettid() getpid() gettid() fcntl$setown(r1, 0x8, r3) ptrace(0xffffffffffffffff, 0x0) semget(0x3, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f00000006c0), &(0x7f0000000180)='./file0\x00', &(0x7f0000000740)="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", 0x1002, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000001d80)="dcd8bdb7ef62f3f700000000000000000000", 0x3080, &(0x7f0000000440)="fa3a51c0858bc666b01dc16b56bb5cb284f8fc67dc7859972aabffff686dc7e71f02bf71b9602a0000b33fd2683a820cbbb4e492b5") mount(&(0x7f00000006c0)=ANY=[@ANYBLOB='/dev/nrd0\x00'], &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='ubifs\x00', 0xfff, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x0, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x1, @mcast1}, r4}}, 0x30) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000480)={0x80000000, 0x7ff}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000600)={0x0}, &(0x7f0000000640)=0xffffffffffffff59) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000680)={r5, 0x3, 0xa7e}, 0x8) recvmmsg(r1, &(0x7f0000001e00)=[{{&(0x7f00000008c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/124, 0x7c}, {&(0x7f00000019c0)=""/44, 0x2c}, {&(0x7f0000001a00)=""/128, 0x80}, {&(0x7f0000001a80)=""/124, 0x7c}, {&(0x7f0000001b00)=""/213, 0xd5}, {&(0x7f0000001c00)=""/23, 0x17}, {&(0x7f0000001c40)=""/105, 0x69}], 0x8, &(0x7f0000001d40)=""/24, 0x18, 0xc59d}, 0x81}, {{0x0, 0x0, &(0x7f0000001d80), 0x0, &(0x7f0000001dc0)=""/5, 0x5, 0x7}, 0x401}], 0x2, 0x0, &(0x7f0000001e80)={0x77359400}) connect$packet(r2, &(0x7f0000001ec0)={0x11, 0xff, r6}, 0x14) mount(&(0x7f0000000380), &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) rseq(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000002280)=ANY=[@ANYBLOB="a10000003078866d44a74475edf1d7f5856563d02dc5dac0a355fe564279c0d182ccbe577ca57b84e6d557327b5fd53637ec8422979c65c91e6813ec6e99419276260e23eb71d04c8c2f5546a69ba0026128359982656a3a452d1b626e45a15096678f04246b598c8aec4dd30976d3157aa5b389368cb6fef8d0fb0299a7044d711bf1fe778bab8979584ce4b846e14477df2b53f742135c33fe3dccf7f97688574c36932c923d846600003782d1787fcc7c000000000000000000000003000000ab6509f96b2c34ccdf1c5ca9b11ad9bcd842eeb505a55ee5703c0ed87fed2a8a46c6a971b258007a923e75ef7e84958579c8fd8502d14907d2afc98afbe09b03cc27bfa32b13748baefdf672916572ad8d5905d5763ef74276e05ea159e813acb9d133aac5f6450cf80e92185b4f065608c585e4e051d90312e66a7e8683bfcb08d02576055dc82c7c5c8881409c2de1cb9aaa6b29e9ea556da5ebf1e62007abe09eb5c02200ad7a7b4253f9036f9744828fbe2b29afcf2a13ad34f7a7781c1a8884a3475c16c76b1b77e8d5e0185854f004380d8d29550de533e10c703b830c9c5762a7d74d360bb942bafee055c70bac4d3f305c25e43e3ab69b5fb0c20af4be00494a1c8956772fbdfacd4967555130296e28163511f8bf9fb1b346ed2f93934d18ef9c282e3eba8d0c32591535a3138a1c6f25727cffdbf41d5d50dadba70cd50d52f6750f7149c595d53a53ab46f4746cbaa112f6cb764b8f358e708a99ffa7022cf7847368da46067879cbf02faf8ed8bb111541a008f9356ec1d062069272ec1bcc2042fd"], &(0x7f0000000140)=0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240), 0x4) 03:59:11 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x900, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c) 03:59:11 executing program 1 (fault-call:3 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x3000000}, [{}]}, 0x78) 03:59:11 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0xd00, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c) [ 930.639312] FAULT_INJECTION: forcing a failure. [ 930.639312] name failslab, interval 1, probability 0, space 0, times 0 [ 930.645410] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 930.645410] program syz-executor4 not setting count and/or reply_len properly [ 930.651224] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 930.651224] program syz-executor0 not setting count and/or reply_len properly [ 930.739539] CPU: 0 PID: 14623 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181016+ #95 [ 930.748119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 930.757486] Call Trace: [ 930.760101] dump_stack+0x244/0x39d [ 930.763753] ? dump_stack_print_info.cold.1+0x20/0x20 [ 930.768963] ? debug_smp_processor_id+0x1c/0x20 [ 930.773643] ? perf_trace_lock+0x14d/0x7a0 [ 930.777900] should_fail.cold.4+0xa/0x17 [ 930.781992] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 930.787115] ? debug_smp_processor_id+0x1c/0x20 [ 930.791800] ? perf_trace_lock+0x14d/0x7a0 [ 930.796051] ? lock_is_held_type+0x210/0x210 [ 930.800485] ? lock_is_held_type+0x210/0x210 [ 930.804906] ? find_held_lock+0x36/0x1c0 [ 930.804945] ? perf_trace_sched_process_exec+0x860/0x860 [ 930.814453] __should_failslab+0x124/0x180 [ 930.814477] should_failslab+0x9/0x14 [ 930.814496] kmem_cache_alloc_node+0x26e/0x730 [ 930.814516] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 930.814534] ? check_preemption_disabled+0x48/0x280 [ 930.814562] __alloc_skb+0x114/0x770 [ 930.841402] ? netdev_alloc_frag+0x1f0/0x1f0 [ 930.845826] ? __release_sock+0x3a0/0x3a0 [ 930.849991] ? __local_bh_enable_ip+0x160/0x260 [ 930.854687] ? netlink_insert+0xfe/0x240 [ 930.858779] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 930.864320] ? netlink_autobind.isra.34+0x232/0x310 [ 930.869353] netlink_sendmsg+0xb29/0xfc0 [ 930.873447] ? netlink_unicast+0x760/0x760 [ 930.877697] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 930.882662] ? apparmor_socket_sendmsg+0x29/0x30 [ 930.887434] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 930.892983] ? security_socket_sendmsg+0x94/0xc0 [ 930.897746] ? netlink_unicast+0x760/0x760 [ 930.901998] sock_sendmsg+0xd5/0x120 [ 930.905725] ___sys_sendmsg+0x7fd/0x930 [ 930.909732] ? copy_msghdr_from_user+0x580/0x580 [ 930.914568] ? lock_downgrade+0x900/0x900 [ 930.918831] ? proc_fail_nth_write+0x9e/0x210 [ 930.923451] ? __fget_light+0x2e9/0x430 [ 930.927443] ? fget_raw+0x20/0x20 [ 930.930906] ? find_held_lock+0x36/0x1c0 [ 930.935077] ? kasan_check_write+0x14/0x20 [ 930.939329] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 930.944282] ? wait_for_completion+0x8a0/0x8a0 [ 930.948908] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 930.951043] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 930.951043] program syz-executor4 not setting count and/or reply_len properly [ 930.954469] ? sockfd_lookup_light+0xc5/0x160 [ 930.954493] __sys_sendmsg+0x11d/0x280 [ 930.954514] ? __ia32_sys_shutdown+0x80/0x80 [ 930.954536] ? __sb_end_write+0xd9/0x110 [ 930.954578] ? fput+0x130/0x1a0 03:59:11 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x5, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c) 03:59:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x700}, [{}]}, 0x78) 03:59:11 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c) 03:59:11 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x15, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c) [ 930.954611] ? do_syscall_64+0x9a/0x820 [ 930.954626] ? do_syscall_64+0x9a/0x820 [ 930.954658] ? trace_hardirqs_off_caller+0x300/0x300 [ 930.954682] __x64_sys_sendmsg+0x78/0xb0 [ 930.954711] do_syscall_64+0x1b9/0x820 [ 931.011844] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 931.017245] ? syscall_return_slowpath+0x5e0/0x5e0 [ 931.022198] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 931.027070] ? trace_hardirqs_on_caller+0x310/0x310 [ 931.032099] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 931.037134] ? prepare_exit_to_usermode+0x291/0x3b0 [ 931.042164] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 931.047030] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 931.052242] RIP: 0033:0x457569 [ 931.055445] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 931.074362] RSP: 002b:00007fdfe8e43c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 931.082089] RAX: ffffffffffffffda RBX: 00007fdfe8e43c90 RCX: 0000000000457569 03:59:11 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x3ffdcf, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c) [ 931.089378] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 931.096857] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 931.096870] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdfe8e446d4 [ 931.111410] R13: 00000000004c387d R14: 00000000004d56d0 R15: 0000000000000005 03:59:12 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0xffffffffa0008000}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x4c00}, [{}]}, 0x78) 03:59:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uinput\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000003c0)='\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0xeaa, 0x0, 0x0, 0x0, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0xff, 0x5, 0x0, 0x6, 0x9, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb01, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x800, 0x0, 0x5, 0x0, 0x1, 0x10000, 0x196ef6e6}, 0x0, 0x10, 0xffffffffffffffff, 0x1) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000480)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SMI(r4, 0xaeb7) r6 = getgid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000c00)={0x0, 0x0}, &(0x7f0000000c40)=0xc) syz_mount_image$ext4(&(0x7f0000000880)='ext3\x00', &(0x7f00000008c0)='./file0\x00', 0x100000001, 0x4, &(0x7f0000000b80)=[{&(0x7f0000000900)="083273ff78424127a91756f9ca2a78e656779adbf23f97486080d5daa22ea3544470418b4a80fd5e975960a3e0b92fa0ebacd96f484504a586faab4a956aa59c15b33e007d94683ba719ee113e", 0x4d, 0x800}, {&(0x7f0000000980)="f0ddaea8f989bb666b3e045d39f4cef69fd97cdb413e3480c9e886ff1dd33efec4a0c5ac1caa5f7e1035c592fd088211b0373d0890b4991105a247462babf7da65506844ad8e7c7ff4d77a94a44d5c1245326829c78b0bbde13e0a0b1660da4fdb804e32cd62d10ef8643cc4e2709277ea063af97f3036c1c834913b9736f8f8ba4926ec7fbfa8a2198e713b9dd3520bf3", 0x91, 0x5}, {&(0x7f0000000a40)="728b87d618441c1c8828b2c6d99fc8e8f579a4f4adac49896c0259c9a0d7fdd5abcb3ec1ed2fe1fcbd0ad96ae45bd7d5c8c10c2e0e02ca47521ab351917287dee274e8250ef4fa5fcfd7dadbc5ebf61f42b8a622903ba09d6d375fe3b3531db5bc0e97942331f4aa73f22aae6d9108457297417d6a816f820915908a8594ea97a60ba8ec1ebad471624835a5e587a93b978fdca2b0192ce73d8e609ea1aa542d720e676b1e44df8e7f5b1c6ecf32d1ad34fc4592456c3f9188590bad15b2736583c8", 0xc2, 0x9}, {&(0x7f0000000b40)="f913cb5a5e94d2ffc5e998148d580ab1fe7d05cbc39aa2c4d7f5b8949bfa450fbcc469b3e7e5706ef511a2dc5f222b04f19eb575a4b5db3c17a05ca4", 0x3c, 0x200}], 0x8, &(0x7f0000000c80)={[{@data_ordered='data=ordered'}, {@grpjquota='grpjquota='}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@nombcache='nombcache'}, {@bsdgroups='bsdgroups'}, {@nombcache='nombcache'}, {@resgid={'resgid', 0x3d, r6}}, {@mblk_io_submit='mblk_io_submit'}], [{@appraise_type='appraise_type=imasig'}, {@obj_role={'obj_role', 0x3d, 'posix_acl_access:'}}, {@obj_role={'obj_role', 0x3d, 'ip6gretap0\x00'}}, {@appraise_type='appraise_type=imasig'}, {@subj_user={'subj_user', 0x3d, 'vmnet1/posix_acl_access$lo,'}}, {@euid_eq={'euid', 0x3d, r7}}]}) r8 = syz_open_procfs$namespace(r1, &(0x7f0000000800)='ns/mnt\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/full\x00', 0x101040, 0x0) write(r5, &(0x7f0000000340), 0x10000014c) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x0) r9 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000700)={0x0, 0x9}, 0x8) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000580)=[0x4, 0x3], 0x2, 0x6, 0x9, 0x6, 0x6, 0x9, {0x0, 0x1, 0x30000000000000, 0xc88, 0x4, 0x8000, 0x101, 0xdb0, 0x3ff, 0x4, 0x0, 0x200, 0x4, 0x8, "6319433ecd7c10d466c6966b2ed73d4dfe0c800d2ac6b60c8ef431a1c4a9f469"}}) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r9, &(0x7f0000000540)={r4, 0xffffffffffffffff, 0x9}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x20}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r10+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) ioctl$int_out(r8, 0x2, &(0x7f0000000840)) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000006c0)=0x5) ppoll(&(0x7f0000000740)=[{r5, 0x2065417c0d3c6ce5}, {r3, 0x100}, {r9, 0x10}, {r5, 0x1000}, {r0, 0x500d}, {r2, 0x10}, {r2}], 0x7, &(0x7f0000000780)={0x77359400}, &(0x7f00000007c0)={0x7}, 0x8) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'ip6gretap0\x00'}) openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x101000, 0x0) 03:59:12 executing program 1 (fault-call:3 fault-nth:1): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:12 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x40003ffdcf, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c) 03:59:12 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x20000, 0x0) syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000008c0)) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000c00)}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x360d, &(0x7f0000000600)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000240)=0x0) ptrace$getenv(0x4201, r1, 0x4, &(0x7f0000000280)) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000580)={0x0, @multicast1, @loopback}, &(0x7f00000005c0)=0xc) bind$xdp(r0, &(0x7f0000000600)={0x2c, 0x6, r2, 0x39, r0}, 0x10) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f00000002c0)={0x0, 0x9}) mount$overlay(0x404000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) setxattr$security_smack_entry(&(0x7f0000000800)='./file1\x00', &(0x7f0000000840)='security.SMACK64MMAP\x00', &(0x7f0000000880)='[}$keyring\x00', 0xb, 0x2) fstat(r0, &(0x7f0000001a40)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001ac0)={{{@in6=@ipv4={[], [], @multicast2}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000001bc0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001cc0)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000001dc0)=0xe8) stat(&(0x7f0000001e00)='./file1\x00', &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f0000000680)={{}, {0x1, 0x3}, [{0x2, 0x2, r5}, {0x2, 0x0, r3}, {0x2, 0x0, r4}, {0x2, 0x1, r3}], {0x4, 0x7}, [], {0x10, 0x4}, {0x20, 0x3}}, 0x44, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001ec0)={{{@in6=@remote, @in=@broadcast}}, {{@in6=@mcast2}}}, &(0x7f0000001fc0)=0xe8) getuid() syz_mount_image$reiserfs(&(0x7f0000000300)='reiserfs\x00', &(0x7f0000000340)='./file1\x00', 0x1, 0x1, &(0x7f0000000640)=[{&(0x7f0000000480)="cefe9ff80f37c5e46f54911e4fb38a37e7dd99fa", 0x14, 0x101}], 0x2000000, &(0x7f00000004c0)={[{@replayonly='replayonly'}], [{@pcr={'pcr', 0x3d, 0x30}}]}) 03:59:12 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x3, r0, 0x0, [0x305f, 0xa]}, 0x2c) [ 931.574824] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 931.574824] program syz-executor4 not setting count and/or reply_len properly [ 931.645625] FAULT_INJECTION: forcing a failure. [ 931.645625] name failslab, interval 1, probability 0, space 0, times 0 [ 931.657782] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 931.671054] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 931.671054] program syz-executor4 not setting count and/or reply_len properly [ 931.724012] CPU: 1 PID: 14671 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181016+ #95 [ 931.732554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 931.741918] Call Trace: [ 931.744529] dump_stack+0x244/0x39d [ 931.748198] ? dump_stack_print_info.cold.1+0x20/0x20 [ 931.753415] ? debug_smp_processor_id+0x1c/0x20 [ 931.758094] ? perf_trace_lock+0x14d/0x7a0 [ 931.762343] should_fail.cold.4+0xa/0x17 [ 931.762367] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 931.762408] ? save_stack+0xa9/0xd0 [ 931.775188] ? find_held_lock+0x36/0x1c0 [ 931.779291] ? perf_trace_sched_process_exec+0x860/0x860 [ 931.784752] ? check_preemption_disabled+0x48/0x280 [ 931.789784] __should_failslab+0x124/0x180 [ 931.794033] should_failslab+0x9/0x14 [ 931.797867] kmem_cache_alloc_node_trace+0x270/0x740 [ 931.803088] __kmalloc_node_track_caller+0x3c/0x70 [ 931.808031] __kmalloc_reserve.isra.40+0x41/0xe0 [ 931.812817] __alloc_skb+0x150/0x770 [ 931.816553] ? netdev_alloc_frag+0x1f0/0x1f0 03:59:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0xa0}, [{}]}, 0x78) [ 931.821075] ? __release_sock+0x3a0/0x3a0 [ 931.825247] ? __local_bh_enable_ip+0x160/0x260 [ 931.829942] ? netlink_insert+0xfe/0x240 [ 931.834031] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 931.839588] ? netlink_autobind.isra.34+0x232/0x310 [ 931.844630] netlink_sendmsg+0xb29/0xfc0 [ 931.848720] ? netlink_unicast+0x760/0x760 [ 931.852971] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 931.857922] ? apparmor_socket_sendmsg+0x29/0x30 [ 931.862783] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 931.868335] ? security_socket_sendmsg+0x94/0xc0 [ 931.873101] ? netlink_unicast+0x760/0x760 [ 931.877457] sock_sendmsg+0xd5/0x120 [ 931.881193] ___sys_sendmsg+0x7fd/0x930 [ 931.885200] ? copy_msghdr_from_user+0x580/0x580 [ 931.889993] ? lock_downgrade+0x900/0x900 [ 931.894185] ? proc_fail_nth_write+0x9e/0x210 [ 931.898702] ? __fget_light+0x2e9/0x430 [ 931.902705] ? fget_raw+0x20/0x20 [ 931.906207] ? find_held_lock+0x36/0x1c0 [ 931.910293] ? kasan_check_write+0x14/0x20 [ 931.914547] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 931.919511] ? wait_for_completion+0x8a0/0x8a0 [ 931.924122] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 931.929691] ? sockfd_lookup_light+0xc5/0x160 [ 931.934224] __sys_sendmsg+0x11d/0x280 [ 931.938129] ? __ia32_sys_shutdown+0x80/0x80 [ 931.942564] ? __sb_end_write+0xd9/0x110 [ 931.946651] ? fput+0x130/0x1a0 [ 931.949955] ? do_syscall_64+0x9a/0x820 [ 931.953942] ? do_syscall_64+0x9a/0x820 [ 931.957955] ? trace_hardirqs_off_caller+0x300/0x300 [ 931.963084] __x64_sys_sendmsg+0x78/0xb0 [ 931.967173] do_syscall_64+0x1b9/0x820 [ 931.971073] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 931.976457] ? syscall_return_slowpath+0x5e0/0x5e0 [ 931.981400] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 931.986258] ? trace_hardirqs_on_caller+0x310/0x310 [ 931.991267] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 931.996274] ? prepare_exit_to_usermode+0x291/0x3b0 [ 932.001289] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 932.006132] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 932.011321] RIP: 0033:0x457569 [ 932.014504] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 932.033489] RSP: 002b:00007fdfe8e43c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 932.041190] RAX: ffffffffffffffda RBX: 00007fdfe8e43c90 RCX: 0000000000457569 [ 932.048448] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 932.055790] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 932.063061] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdfe8e446d4 03:59:12 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x15, r0, 0x0, [0x305f, 0xa]}, 0x2c) 03:59:12 executing program 3: unshare(0x400) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000600)={0x0, 0xffffffffffffffff, 0x2a, 0xf, @buffer={0x0, 0xef, &(0x7f0000000400)=""/239}, &(0x7f0000000200)="55b172021d0d81d2100034f58948923a6ce7038d3025d9816e34a1a710138e1d34701275192b63d0d771", &(0x7f0000000500)=""/231, 0x1, 0x20, 0x0, &(0x7f0000000280)}) unshare(0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7570707dd244c57f1aa22f66696c65302c6c6f77657264e461d825fc66690e0dee6c65302c776f726b64723d2e2f6669"]) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x73, 0xe5, &(0x7f0000000700)="6bd7ac5bf172ce18140dc278b0cbe539fe71dd36d7c4197f04f9cd91e6bdc377edf1392df3813c63669e029d149e9966fb7f1dcbbfb48d3dbba151cf12eca59840b8f95466ca0cd9cd4cc114eeeeec4b24f17dac61566b42da59476e6b820a8adcd23b9ee65bd296f15cd6f6cd69052186b5c910b3395723d151999348d4edde1fdc69214fd53894e3660483fd82", &(0x7f00000007c0)=""/229, 0x1}, 0x28) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) personality(0x0) sendmmsg(r2, &(0x7f0000004a00)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000001640)=[{&(0x7f0000000500)}], 0x1, &(0x7f00000016c0)}, 0x8}], 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/ppp\x00', 0x4, 0x0) memfd_create(&(0x7f0000000080)="73970ddb08df8c656c667b7070703070707031236d643573756d00", 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x1, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) setreuid(r4, 0x0) accept4(0xffffffffffffffff, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) mknodat(r1, &(0x7f0000000000)='./file1\x00', 0x14, 0x18000000) fdatasync(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000240)=0x0) ptrace$getregs(0xe, r5, 0xfffffffffffffff7, &(0x7f00000008c0)=""/203) open(&(0x7f0000000680)='./file1\x00', 0x8040, 0x0) [ 932.070314] R13: 00000000004c387d R14: 00000000004d56d0 R15: 0000000000000005 03:59:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0xffffffff00000000}, [{}]}, 0x78) [ 932.139506] overlayfs: unrecognized mount option "upp}ÒDÅ¢/file0" or missing value 03:59:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x3f00000000000000}, [{}]}, 0x78) [ 932.374702] overlayfs: unrecognized mount option "upp}ÒDÅ¢/file0" or missing value 03:59:13 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0xf0ffffff00000000}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:13 executing program 1 (fault-call:3 fault-nth:2): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:13 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x2000000000000001, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x6}, 0x20) write(r1, &(0x7f00000000c0)="e4", 0xffffffffffffff9f) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000900)={0x0, 0x0, 0x20}, 0xc) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140), 0x20) sendmmsg$alg(r1, &(0x7f0000005d40)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="ca", 0x1}], 0x1}], 0x1, 0x0) r2 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) shutdown(r2, 0x1) 03:59:13 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0xf00, [0x305f, 0xa]}, 0x2c) 03:59:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x4c000000}, [{}]}, 0x78) [ 932.503813] FAULT_INJECTION: forcing a failure. [ 932.503813] name failslab, interval 1, probability 0, space 0, times 0 [ 932.543712] CPU: 1 PID: 14717 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181016+ #95 [ 932.552350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 932.561710] Call Trace: [ 932.564316] dump_stack+0x244/0x39d [ 932.567967] ? dump_stack_print_info.cold.1+0x20/0x20 [ 932.573192] ? debug_smp_processor_id+0x1c/0x20 [ 932.577876] ? perf_trace_lock+0x14d/0x7a0 [ 932.582304] should_fail.cold.4+0xa/0x17 [ 932.586385] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 932.591491] ? mark_held_locks+0x130/0x130 [ 932.595738] ? find_held_lock+0x36/0x1c0 [ 932.599814] ? zap_class+0x640/0x640 03:59:13 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0x81, 0xa9, &(0x7f0000000100)="047859446a1bec4a3d0009c7737ec9435e940f7df29ed6413b2e94d098e04aa033e55c47f20b3eda8cac3a0f81cc89119adfa0424fd692b775ac1f20cb77747fd72f250bbecdd080599dee642788a20f95664d285159905d5af6f19463953a4862a0ee9cf681a61469d917f9d3b032fa62dce3cca93ff3ede88ca52cb5599e1f70", &(0x7f00000001c0)=""/169, 0x2}, 0x28) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x4b564d03, 0x1, 0x40000081], [0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) [ 932.603538] ? mark_held_locks+0x130/0x130 [ 932.607783] ? find_held_lock+0x36/0x1c0 [ 932.611866] ? __lock_is_held+0xb5/0x140 [ 932.615976] ? perf_trace_sched_process_exec+0x860/0x860 [ 932.621451] ? lock_is_held_type+0x210/0x210 [ 932.625870] ? perf_trace_lock+0x7a0/0x7a0 [ 932.630141] ? mark_held_locks+0x130/0x130 [ 932.634404] __should_failslab+0x124/0x180 [ 932.638651] should_failslab+0x9/0x14 [ 932.642465] __kmalloc+0x2e0/0x760 [ 932.646016] ? perf_trace_lock_acquire+0x15b/0x800 [ 932.651071] ? genl_family_rcv_msg+0xcc5/0x11a0 [ 932.655770] genl_family_rcv_msg+0xcc5/0x11a0 [ 932.660289] ? genl_unregister_family+0x8a0/0x8a0 [ 932.665152] ? lock_downgrade+0x900/0x900 [ 932.669344] ? check_preemption_disabled+0x48/0x280 [ 932.674401] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 932.679347] ? kasan_check_read+0x11/0x20 [ 932.683507] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 932.688813] ? lock_acquire+0x1ed/0x520 [ 932.692811] ? radix_tree_lookup+0x21/0x30 [ 932.697076] genl_rcv_msg+0xc6/0x168 [ 932.700828] netlink_rcv_skb+0x172/0x440 03:59:13 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) [ 932.704983] ? genl_family_rcv_msg+0x11a0/0x11a0 [ 932.709753] ? netlink_ack+0xb80/0xb80 [ 932.713741] ? down_read+0x8d/0x120 [ 932.717409] genl_rcv+0x28/0x40 [ 932.720699] netlink_unicast+0x5a5/0x760 [ 932.724778] ? netlink_attachskb+0x9a0/0x9a0 [ 932.729202] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 932.734751] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 932.739787] netlink_sendmsg+0xa18/0xfc0 [ 932.743873] ? netlink_unicast+0x760/0x760 [ 932.748122] ? aa_sock_msg_perm.isra.14+0xba/0x160 03:59:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100), 0x4) wait4(0x0, &(0x7f0000000580), 0x0, &(0x7f00000005c0)) recvmmsg(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) shutdown(r0, 0x0) [ 932.753071] ? apparmor_socket_sendmsg+0x29/0x30 [ 932.757841] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 932.763379] ? security_socket_sendmsg+0x94/0xc0 [ 932.763421] ? netlink_unicast+0x760/0x760 [ 932.763443] sock_sendmsg+0xd5/0x120 [ 932.763482] ___sys_sendmsg+0x7fd/0x930 [ 932.772468] ? copy_msghdr_from_user+0x580/0x580 [ 932.772490] ? lock_downgrade+0x900/0x900 [ 932.772511] ? proc_fail_nth_write+0x9e/0x210 [ 932.772539] ? __fget_light+0x2e9/0x430 [ 932.797655] ? fget_raw+0x20/0x20 [ 932.801120] ? find_held_lock+0x36/0x1c0 03:59:13 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x2000000000019, 0x40000001, r1, &(0x7f00000000c0)='.\x00') [ 932.805193] ? kasan_check_write+0x14/0x20 [ 932.809441] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 932.814406] ? wait_for_completion+0x8a0/0x8a0 [ 932.819016] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 932.824576] ? sockfd_lookup_light+0xc5/0x160 [ 932.829096] __sys_sendmsg+0x11d/0x280 [ 932.832988] ? __ia32_sys_shutdown+0x80/0x80 [ 932.837406] ? __sb_end_write+0xd9/0x110 [ 932.841495] ? fput+0x130/0x1a0 [ 932.844784] ? do_syscall_64+0x9a/0x820 [ 932.848770] ? do_syscall_64+0x9a/0x820 [ 932.852768] ? trace_hardirqs_off_caller+0x300/0x300 [ 932.857997] __x64_sys_sendmsg+0x78/0xb0 [ 932.862063] do_syscall_64+0x1b9/0x820 [ 932.865969] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 932.871346] ? syscall_return_slowpath+0x5e0/0x5e0 [ 932.876284] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 932.881138] ? trace_hardirqs_on_caller+0x310/0x310 [ 932.886156] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 932.891172] ? prepare_exit_to_usermode+0x291/0x3b0 [ 932.896237] ? trace_hardirqs_off_thunk+0x1a/0x1c 03:59:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)=""/221, &(0x7f0000000000)=0xdd) clone(0x2080000, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000), 0xfffffffffffffe0b, 0x0, &(0x7f0000000100)}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x8000, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000600)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000002f40)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000003040)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000003140)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000003500)={0x0, @broadcast}, &(0x7f0000003540)=0xc) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000003700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000036c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2401000083c91fd029109b11111c6ff5735ae195c33b20c02570d51e961ae32d82db1ff6b82a468f7dc90549f17c286cd6d395dd82e3847a45fbc6670413c5ab97c0ee4cd610fe05db8cc2edb296a9e8e5c7db4ca80c8bbfcd04aa76809d5f85ab477382c05457234d10ef93609ef25a9f50f9ff8f06dddb30f6289eb0afe0411cb09866250436", @ANYRES16=r2, @ANYBLOB="000427bd7000fddbdf250000000008000100", @ANYRES32=r3, @ANYBLOB="3c00020038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000800000008000100", @ANYRES32=r4, @ANYBLOB="c400020038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400090000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="4c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e6700000000"], 0x124}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) [ 932.901115] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 932.906326] RIP: 0033:0x457569 [ 932.908501] FAT-fs (loop0): bogus number of reserved sectors [ 932.909523] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 932.923189] FAT-fs (loop0): Can't find a valid FAT filesystem [ 932.934200] RSP: 002b:00007fdfe8e43c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 932.934218] RAX: ffffffffffffffda RBX: 00007fdfe8e43c90 RCX: 0000000000457569 03:59:13 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x900, [0x305f, 0xa]}, 0x2c) 03:59:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6800}, [{}]}, 0x78) [ 932.934228] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 932.934238] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 932.934246] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdfe8e446d4 [ 932.934255] R13: 00000000004c387d R14: 00000000004d56d0 R15: 0000000000000005 [ 933.179548] FAT-fs (loop0): bogus number of reserved sectors [ 933.186078] FAT-fs (loop0): Can't find a valid FAT filesystem 03:59:13 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x8dffffff00000000}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:13 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x1400, [0x305f, 0xa]}, 0x2c) 03:59:13 executing program 3: r0 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000040)=0x1c) mmap(&(0x7f00007d5000/0x4000)=nil, 0x4000, 0x20000001, 0x31, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0xa, &(0x7f0000000300), 0x4) 03:59:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x100000000000000}, [{}]}, 0x78) 03:59:13 executing program 1 (fault-call:3 fault-nth:3): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:13 executing program 0: r0 = getpgid(0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) sched_setscheduler(r0, 0x8000000000005, &(0x7f00000000c0)=0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0xc008240a, &(0x7f0000000080)="286c6129314e5f006e4a7bf0e5c4d1edb93023") clock_getres(0x7, &(0x7f0000000180)) [ 933.322120] FAULT_INJECTION: forcing a failure. [ 933.322120] name failslab, interval 1, probability 0, space 0, times 0 [ 933.372457] CPU: 0 PID: 14766 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181016+ #95 [ 933.380995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 933.390354] Call Trace: [ 933.392962] dump_stack+0x244/0x39d [ 933.396609] ? dump_stack_print_info.cold.1+0x20/0x20 [ 933.401817] ? debug_smp_processor_id+0x1c/0x20 [ 933.406547] ? perf_trace_lock+0x14d/0x7a0 [ 933.410809] should_fail.cold.4+0xa/0x17 [ 933.414890] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 933.420007] ? __lock_acquire+0x62f/0x4c20 [ 933.424283] ? check_preemption_disabled+0x48/0x280 [ 933.429310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 933.434861] ? zap_class+0x640/0x640 [ 933.438603] ? find_held_lock+0x36/0x1c0 [ 933.442693] ? __lock_is_held+0xb5/0x140 [ 933.446893] ? perf_trace_sched_process_exec+0x860/0x860 [ 933.452349] ? perf_trace_lock_acquire+0x15b/0x800 [ 933.457300] __should_failslab+0x124/0x180 [ 933.457323] should_failslab+0x9/0x14 [ 933.465417] kmem_cache_alloc_node+0x26e/0x730 [ 933.465432] ? lock_downgrade+0x900/0x900 [ 933.465447] ? check_preemption_disabled+0x48/0x280 [ 933.465482] __alloc_skb+0x114/0x770 [ 933.483012] ? netdev_alloc_frag+0x1f0/0x1f0 [ 933.487565] ? ovs_ct_limit_cmd_get+0x2fd/0x1490 [ 933.492350] ? lock_downgrade+0x900/0x900 [ 933.496505] ? check_preemption_disabled+0x48/0x280 [ 933.501569] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 933.506515] ? kasan_check_read+0x11/0x20 [ 933.510680] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 933.515964] ? rcu_softirq_qs+0x20/0x20 03:59:14 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x1300000000000000, [0x305f, 0xa]}, 0x2c) 03:59:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6000000}, [{}]}, 0x78) 03:59:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1000000}, [{}]}, 0x78) [ 933.519955] ovs_ct_limit_cmd_reply_start+0x58/0x1e0 [ 933.525095] ovs_ct_limit_cmd_get+0x369/0x1490 [ 933.529798] ? __kmalloc+0x15b/0x760 [ 933.533529] ? genl_family_rcv_msg+0xcc5/0x11a0 [ 933.538206] ? genl_rcv_msg+0xc6/0x168 [ 933.542105] ? netlink_rcv_skb+0x172/0x440 [ 933.546354] ? genl_rcv+0x28/0x40 [ 933.549924] ? sock_sendmsg+0xd5/0x120 [ 933.553820] ? ___sys_sendmsg+0x7fd/0x930 [ 933.557974] ? __sys_sendmsg+0x11d/0x280 [ 933.562057] ? __x64_sys_sendmsg+0x78/0xb0 [ 933.566316] ? do_syscall_64+0x1b9/0x820 [ 933.570403] ? ovs_ct_limit_cmd_set+0x1040/0x1040 [ 933.575260] ? find_held_lock+0x36/0x1c0 [ 933.579342] ? zap_class+0x640/0x640 [ 933.583085] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 933.588718] ? check_preemption_disabled+0x48/0x280 [ 933.593765] ? __lock_is_held+0xb5/0x140 [ 933.597852] ? memset+0x31/0x40 [ 933.601161] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 933.606707] ? __nla_parse+0x12c/0x3e0 [ 933.610624] genl_family_rcv_msg+0x8a7/0x11a0 [ 933.615146] ? genl_unregister_family+0x8a0/0x8a0 03:59:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x7a000000}, [{}]}, 0x78) [ 933.620000] ? lock_downgrade+0x900/0x900 [ 933.624177] ? check_preemption_disabled+0x48/0x280 [ 933.629213] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 933.634160] ? kasan_check_read+0x11/0x20 [ 933.638326] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 933.643642] ? radix_tree_lookup+0x21/0x30 [ 933.647893] genl_rcv_msg+0xc6/0x168 [ 933.651620] netlink_rcv_skb+0x172/0x440 [ 933.655709] ? genl_family_rcv_msg+0x11a0/0x11a0 [ 933.660479] ? netlink_ack+0xb80/0xb80 [ 933.664379] ? down_read+0x8d/0x120 [ 933.668041] genl_rcv+0x28/0x40 03:59:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6c00}, [{}]}, 0x78) [ 933.671326] netlink_unicast+0x5a5/0x760 [ 933.675415] ? netlink_attachskb+0x9a0/0x9a0 [ 933.679837] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 933.685375] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 933.690420] netlink_sendmsg+0xa18/0xfc0 [ 933.694505] ? netlink_unicast+0x760/0x760 [ 933.698753] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 933.703702] ? apparmor_socket_sendmsg+0x29/0x30 [ 933.708500] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 933.714129] ? security_socket_sendmsg+0x94/0xc0 [ 933.718888] ? netlink_unicast+0x760/0x760 [ 933.723133] sock_sendmsg+0xd5/0x120 [ 933.726861] ___sys_sendmsg+0x7fd/0x930 [ 933.730859] ? copy_msghdr_from_user+0x580/0x580 [ 933.735747] ? lock_downgrade+0x900/0x900 [ 933.739918] ? proc_fail_nth_write+0x9e/0x210 [ 933.744430] ? __fget_light+0x2e9/0x430 [ 933.748427] ? fget_raw+0x20/0x20 [ 933.751975] ? find_held_lock+0x36/0x1c0 [ 933.756070] ? kasan_check_write+0x14/0x20 [ 933.760320] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 933.765275] ? wait_for_completion+0x8a0/0x8a0 03:59:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x4c}, [{}]}, 0x78) [ 933.769876] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 933.775412] ? sockfd_lookup_light+0xc5/0x160 [ 933.775433] __sys_sendmsg+0x11d/0x280 [ 933.775451] ? __ia32_sys_shutdown+0x80/0x80 [ 933.788214] ? __sb_end_write+0xd9/0x110 [ 933.788238] ? fput+0x130/0x1a0 [ 933.788255] ? do_syscall_64+0x9a/0x820 [ 933.788270] ? do_syscall_64+0x9a/0x820 [ 933.788297] ? trace_hardirqs_off_caller+0x300/0x300 [ 933.808811] __x64_sys_sendmsg+0x78/0xb0 [ 933.812928] do_syscall_64+0x1b9/0x820 [ 933.816829] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 933.822205] ? syscall_return_slowpath+0x5e0/0x5e0 [ 933.827137] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 933.831986] ? trace_hardirqs_on_caller+0x310/0x310 [ 933.837040] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 933.842063] ? prepare_exit_to_usermode+0x291/0x3b0 [ 933.847093] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 933.851955] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 933.857152] RIP: 0033:0x457569 [ 933.860347] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 933.879427] RSP: 002b:00007fdfe8e43c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 933.879444] RAX: ffffffffffffffda RBX: 00007fdfe8e43c90 RCX: 0000000000457569 [ 933.879453] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 933.879465] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 933.894441] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdfe8e446d4 [ 933.894452] R13: 00000000004c387d R14: 00000000004d56d0 R15: 0000000000000005 03:59:14 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x8000000000000000}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x7a}, [{}]}, 0x78) 03:59:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x4c}, [{}]}, 0x78) 03:59:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6c00}, [{}]}, 0x78) 03:59:14 executing program 1 (fault-call:3 fault-nth:4): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:14 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x13000000, [0x305f, 0xa]}, 0x2c) [ 934.200293] sg_write: 20 callbacks suppressed [ 934.200362] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 934.200362] program syz-executor4 not setting count and/or reply_len properly 03:59:14 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0xd00000000000000, [0x305f, 0xa]}, 0x2c) [ 934.255120] FAULT_INJECTION: forcing a failure. [ 934.255120] name failslab, interval 1, probability 0, space 0, times 0 [ 934.268048] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 934.268048] program syz-executor0 not setting count and/or reply_len properly [ 934.285368] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 934.285368] program syz-executor4 not setting count and/or reply_len properly [ 934.320371] CPU: 0 PID: 14813 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181016+ #95 [ 934.328900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 934.338347] Call Trace: [ 934.340967] dump_stack+0x244/0x39d [ 934.344638] ? dump_stack_print_info.cold.1+0x20/0x20 [ 934.349847] ? debug_smp_processor_id+0x1c/0x20 [ 934.354539] ? perf_trace_lock+0x14d/0x7a0 [ 934.358794] should_fail.cold.4+0xa/0x17 [ 934.363175] ? fault_create_debugfs_attr+0x1f0/0x1f0 03:59:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x600000000000000}, [{}]}, 0x78) [ 934.368302] ? zap_class+0x640/0x640 [ 934.372042] ? save_stack+0xa9/0xd0 [ 934.372070] ? find_held_lock+0x36/0x1c0 [ 934.372090] ? __lock_is_held+0xb5/0x140 [ 934.383825] ? perf_trace_sched_process_exec+0x860/0x860 [ 934.383848] ? check_preemption_disabled+0x48/0x280 [ 934.383871] __should_failslab+0x124/0x180 [ 934.383892] should_failslab+0x9/0x14 [ 934.402524] kmem_cache_alloc_node_trace+0x270/0x740 [ 934.407660] __kmalloc_node_track_caller+0x3c/0x70 [ 934.412609] __kmalloc_reserve.isra.40+0x41/0xe0 [ 934.414931] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 934.414931] program syz-executor4 not setting count and/or reply_len properly [ 934.417520] __alloc_skb+0x150/0x770 [ 934.417543] ? netdev_alloc_frag+0x1f0/0x1f0 [ 934.417572] ? ovs_ct_limit_cmd_get+0x2fd/0x1490 [ 934.417589] ? lock_downgrade+0x900/0x900 [ 934.417611] ? check_preemption_disabled+0x48/0x280 [ 934.446849] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; 03:59:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x7400}, [{}]}, 0x78) [ 934.446849] program syz-executor4 not setting count and/or reply_len properly [ 934.450609] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 934.450628] ? kasan_check_read+0x11/0x20 [ 934.450646] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 934.450664] ? rcu_softirq_qs+0x20/0x20 [ 934.490020] ovs_ct_limit_cmd_reply_start+0x58/0x1e0 [ 934.495140] ovs_ct_limit_cmd_get+0x369/0x1490 [ 934.499755] ? __kmalloc+0x15b/0x760 [ 934.503574] ? genl_family_rcv_msg+0xcc5/0x11a0 [ 934.508262] ? genl_rcv_msg+0xc6/0x168 [ 934.509206] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 934.509206] program syz-executor4 not setting count and/or reply_len properly [ 934.512167] ? netlink_rcv_skb+0x172/0x440 [ 934.512181] ? genl_rcv+0x28/0x40 [ 934.512203] ? sock_sendmsg+0xd5/0x120 [ 934.512228] ? ___sys_sendmsg+0x7fd/0x930 [ 934.512242] ? __sys_sendmsg+0x11d/0x280 [ 934.512256] ? __x64_sys_sendmsg+0x78/0xb0 [ 934.512291] ? do_syscall_64+0x1b9/0x820 [ 934.512311] ? ovs_ct_limit_cmd_set+0x1040/0x1040 [ 934.512329] ? find_held_lock+0x36/0x1c0 [ 934.512353] ? zap_class+0x640/0x640 03:59:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6800000000000000}, [{}]}, 0x78) [ 934.512378] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 934.512397] ? check_preemption_disabled+0x48/0x280 [ 934.512425] ? __lock_is_held+0xb5/0x140 [ 934.512453] ? memset+0x31/0x40 [ 934.512469] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 934.512484] ? __nla_parse+0x12c/0x3e0 [ 934.512518] genl_family_rcv_msg+0x8a7/0x11a0 [ 934.512547] ? genl_unregister_family+0x8a0/0x8a0 [ 934.512564] ? lock_downgrade+0x900/0x900 [ 934.512576] ? check_preemption_disabled+0x48/0x280 [ 934.512600] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 934.512626] ? kasan_check_read+0x11/0x20 [ 934.512642] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 934.512682] ? radix_tree_lookup+0x21/0x30 [ 934.512700] genl_rcv_msg+0xc6/0x168 [ 934.512722] netlink_rcv_skb+0x172/0x440 [ 934.553904] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 934.553904] program syz-executor4 not setting count and/or reply_len properly [ 934.556722] ? genl_family_rcv_msg+0x11a0/0x11a0 [ 934.556745] ? netlink_ack+0xb80/0xb80 [ 934.556761] ? down_read+0x8d/0x120 03:59:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6c000000}, [{}]}, 0x78) [ 934.556789] genl_rcv+0x28/0x40 [ 934.587277] netlink_unicast+0x5a5/0x760 [ 934.601267] ? netlink_attachskb+0x9a0/0x9a0 [ 934.601291] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 934.601308] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 934.630533] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 934.630533] program syz-executor4 not setting count and/or reply_len properly [ 934.633874] netlink_sendmsg+0xa18/0xfc0 [ 934.633905] ? netlink_unicast+0x760/0x760 [ 934.633924] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 934.633945] ? apparmor_socket_sendmsg+0x29/0x30 [ 934.633983] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 934.633999] ? security_socket_sendmsg+0x94/0xc0 [ 934.634014] ? netlink_unicast+0x760/0x760 [ 934.634037] sock_sendmsg+0xd5/0x120 [ 934.634055] ___sys_sendmsg+0x7fd/0x930 [ 934.634082] ? copy_msghdr_from_user+0x580/0x580 [ 934.634105] ? lock_downgrade+0x900/0x900 [ 934.634131] ? proc_fail_nth_write+0x9e/0x210 [ 934.672397] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; 03:59:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0xa000}, [{}]}, 0x78) [ 934.672397] program syz-executor4 not setting count and/or reply_len properly [ 934.673460] ? __fget_light+0x2e9/0x430 [ 934.673480] ? fget_raw+0x20/0x20 [ 934.673497] ? find_held_lock+0x36/0x1c0 [ 934.673540] ? kasan_check_write+0x14/0x20 [ 934.708576] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 934.708600] ? wait_for_completion+0x8a0/0x8a0 [ 934.708630] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 934.708650] ? sockfd_lookup_light+0xc5/0x160 [ 934.726577] __sys_sendmsg+0x11d/0x280 [ 934.726597] ? __ia32_sys_shutdown+0x80/0x80 [ 934.726617] ? __sb_end_write+0xd9/0x110 [ 934.726637] ? fput+0x130/0x1a0 [ 934.750148] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 934.750148] program syz-executor4 not setting count and/or reply_len properly [ 934.753754] ? do_syscall_64+0x9a/0x820 [ 934.753788] ? do_syscall_64+0x9a/0x820 [ 934.753818] ? trace_hardirqs_off_caller+0x300/0x300 [ 934.753844] __x64_sys_sendmsg+0x78/0xb0 [ 934.753863] do_syscall_64+0x1b9/0x820 [ 934.753879] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 934.753895] ? syscall_return_slowpath+0x5e0/0x5e0 [ 934.753913] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 934.809270] ? trace_hardirqs_on_caller+0x310/0x310 [ 934.822140] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 934.822158] ? prepare_exit_to_usermode+0x291/0x3b0 [ 934.822178] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 934.901431] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 934.906639] RIP: 0033:0x457569 [ 934.909852] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 934.928865] RSP: 002b:00007fdfe8e43c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 934.936576] RAX: ffffffffffffffda RBX: 00007fdfe8e43c90 RCX: 0000000000457569 [ 934.943840] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 934.951123] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 934.958392] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdfe8e446d4 [ 934.965668] R13: 00000000004c387d R14: 00000000004d56d0 R15: 0000000000000005 03:59:15 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0xa0008000, [0x305f, 0xa]}, 0x2c) 03:59:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6c00}, [{}]}, 0x78) 03:59:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0xa000000000000000}, [{}]}, 0x78) 03:59:15 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x2203}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:15 executing program 1 (fault-call:3 fault-nth:5): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6c000000}, [{}]}, 0x78) [ 935.137832] FAULT_INJECTION: forcing a failure. [ 935.137832] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 935.149714] CPU: 1 PID: 14854 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181016+ #95 [ 935.158233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 935.167688] Call Trace: [ 935.170297] dump_stack+0x244/0x39d [ 935.173952] ? dump_stack_print_info.cold.1+0x20/0x20 [ 935.179157] ? perf_trace_lock_acquire+0x15b/0x800 [ 935.184110] ? print_usage_bug+0xc0/0xc0 [ 935.188194] should_fail.cold.4+0xa/0x17 [ 935.192283] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 935.197425] ? find_held_lock+0x36/0x1c0 [ 935.201512] ? mark_held_locks+0x130/0x130 [ 935.205754] ? lock_downgrade+0x900/0x900 [ 935.210016] ? check_preemption_disabled+0x48/0x280 [ 935.215052] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 935.220012] ? kasan_check_read+0x11/0x20 [ 935.224173] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 935.229464] ? rcu_softirq_qs+0x20/0x20 [ 935.233450] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 935.238999] ? check_preemption_disabled+0x48/0x280 [ 935.244026] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 935.249573] ? debug_smp_processor_id+0x1c/0x20 [ 935.254251] ? perf_trace_lock+0x14d/0x7a0 [ 935.258497] ? debug_smp_processor_id+0x1c/0x20 [ 935.263177] ? perf_trace_lock_acquire+0x15b/0x800 [ 935.268143] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 935.273713] ? should_fail+0x22d/0xd01 [ 935.277615] ? lock_is_held_type+0x210/0x210 [ 935.282041] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 935.287339] __alloc_pages_nodemask+0x34b/0xdd0 [ 935.292030] ? __alloc_pages_slowpath+0x2dd0/0x2dd0 [ 935.297071] ? save_stack+0xa9/0xd0 [ 935.300718] ? find_held_lock+0x36/0x1c0 [ 935.304839] ? trace_hardirqs_off+0xb8/0x310 [ 935.309269] cache_grow_begin+0xa5/0x8c0 [ 935.313354] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 935.318922] ? check_preemption_disabled+0x48/0x280 [ 935.323964] kmem_cache_alloc_node_trace+0x670/0x740 [ 935.329103] __kmalloc_node_track_caller+0x3c/0x70 [ 935.334071] __kmalloc_reserve.isra.40+0x41/0xe0 [ 935.338862] __alloc_skb+0x150/0x770 [ 935.342614] ? netdev_alloc_frag+0x1f0/0x1f0 [ 935.347061] ? ovs_ct_limit_cmd_get+0x2fd/0x1490 [ 935.351832] ? lock_downgrade+0x900/0x900 [ 935.355986] ? check_preemption_disabled+0x48/0x280 [ 935.361015] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 935.365950] ? kasan_check_read+0x11/0x20 [ 935.370128] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 935.375441] ? rcu_softirq_qs+0x20/0x20 [ 935.379435] ovs_ct_limit_cmd_reply_start+0x58/0x1e0 [ 935.384557] ovs_ct_limit_cmd_get+0x369/0x1490 [ 935.389151] ? __kmalloc+0x15b/0x760 [ 935.392882] ? genl_family_rcv_msg+0xcc5/0x11a0 [ 935.397568] ? genl_rcv_msg+0xc6/0x168 [ 935.401463] ? netlink_rcv_skb+0x172/0x440 [ 935.405715] ? genl_rcv+0x28/0x40 [ 935.409270] ? sock_sendmsg+0xd5/0x120 [ 935.413169] ? ___sys_sendmsg+0x7fd/0x930 [ 935.417327] ? __sys_sendmsg+0x11d/0x280 [ 935.421485] ? __x64_sys_sendmsg+0x78/0xb0 [ 935.425840] ? do_syscall_64+0x1b9/0x820 [ 935.429945] ? ovs_ct_limit_cmd_set+0x1040/0x1040 [ 935.434824] ? find_held_lock+0x36/0x1c0 [ 935.438931] ? zap_class+0x640/0x640 [ 935.442666] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 935.448230] ? check_preemption_disabled+0x48/0x280 [ 935.448264] ? __lock_is_held+0xb5/0x140 [ 935.448293] ? memset+0x31/0x40 [ 935.457360] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 935.457377] ? __nla_parse+0x12c/0x3e0 [ 935.457421] genl_family_rcv_msg+0x8a7/0x11a0 [ 935.474573] ? genl_unregister_family+0x8a0/0x8a0 [ 935.479414] ? lock_downgrade+0x900/0x900 [ 935.483554] ? check_preemption_disabled+0x48/0x280 [ 935.488562] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 935.493478] ? kasan_check_read+0x11/0x20 [ 935.497612] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 935.502920] ? radix_tree_lookup+0x21/0x30 [ 935.507148] genl_rcv_msg+0xc6/0x168 [ 935.510853] netlink_rcv_skb+0x172/0x440 [ 935.514910] ? genl_family_rcv_msg+0x11a0/0x11a0 [ 935.519658] ? netlink_ack+0xb80/0xb80 [ 935.523536] ? down_read+0x8d/0x120 [ 935.527165] genl_rcv+0x28/0x40 [ 935.530439] netlink_unicast+0x5a5/0x760 [ 935.534494] ? netlink_attachskb+0x9a0/0x9a0 [ 935.538917] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 935.544452] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 935.549477] netlink_sendmsg+0xa18/0xfc0 [ 935.553550] ? netlink_unicast+0x760/0x760 [ 935.557861] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 935.562792] ? apparmor_socket_sendmsg+0x29/0x30 [ 935.567534] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 935.573060] ? security_socket_sendmsg+0x94/0xc0 [ 935.577807] ? netlink_unicast+0x760/0x760 [ 935.582037] sock_sendmsg+0xd5/0x120 [ 935.585742] ___sys_sendmsg+0x7fd/0x930 [ 935.589712] ? copy_msghdr_from_user+0x580/0x580 [ 935.594476] ? lock_downgrade+0x900/0x900 [ 935.598623] ? proc_fail_nth_write+0x9e/0x210 [ 935.603112] ? __fget_light+0x2e9/0x430 [ 935.607076] ? fget_raw+0x20/0x20 [ 935.610517] ? find_held_lock+0x36/0x1c0 [ 935.614608] ? kasan_check_write+0x14/0x20 [ 935.618850] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 935.623776] ? wait_for_completion+0x8a0/0x8a0 [ 935.628358] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 935.633894] ? sockfd_lookup_light+0xc5/0x160 [ 935.638468] __sys_sendmsg+0x11d/0x280 [ 935.642436] ? __ia32_sys_shutdown+0x80/0x80 [ 935.646839] ? __sb_end_write+0xd9/0x110 [ 935.650907] ? fput+0x130/0x1a0 [ 935.654177] ? do_syscall_64+0x9a/0x820 [ 935.658137] ? do_syscall_64+0x9a/0x820 [ 935.662195] ? trace_hardirqs_off_caller+0x300/0x300 [ 935.667291] __x64_sys_sendmsg+0x78/0xb0 [ 935.671343] do_syscall_64+0x1b9/0x820 [ 935.675218] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 935.680683] ? syscall_return_slowpath+0x5e0/0x5e0 [ 935.685600] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 935.690431] ? trace_hardirqs_on_caller+0x310/0x310 [ 935.695539] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 935.700648] ? prepare_exit_to_usermode+0x291/0x3b0 [ 935.705657] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 935.710492] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 935.715669] RIP: 0033:0x457569 [ 935.718855] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:59:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6c000000}, [{}]}, 0x78) 03:59:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6c000000}, [{}]}, 0x78) 03:59:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x600000000000000}, [{}]}, 0x78) 03:59:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x600000000000000}, [{}]}, 0x78) 03:59:16 executing program 0: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) getpeername$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) recvfrom$packet(r0, &(0x7f0000000140)=""/70, 0x46, 0x20, &(0x7f0000000200)={0x11, 0xf7, r1, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20280, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000040)={0x5, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000a00)) ioctl$BLKALIGNOFF(r4, 0x127a, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f00000005c0)={0xfffffffffffffff7}) [ 935.737921] RSP: 002b:00007fdfe8e43c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 935.745614] RAX: ffffffffffffffda RBX: 00007fdfe8e43c90 RCX: 0000000000457569 [ 935.752885] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 935.760161] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 935.767417] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdfe8e446d4 [ 935.774672] R13: 00000000004c387d R14: 00000000004d56d0 R15: 0000000000000005 03:59:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6c00}, [{}]}, 0x78) 03:59:16 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x7000000, [0x305f, 0xa]}, 0x2c) 03:59:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x500000000000000}, [{}]}, 0x78) 03:59:16 executing program 1 (fault-call:3 fault-nth:6): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 935.967772] FAULT_INJECTION: forcing a failure. [ 935.967772] name failslab, interval 1, probability 0, space 0, times 0 [ 936.008082] CPU: 1 PID: 14885 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181016+ #95 [ 936.016626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 936.025983] Call Trace: [ 936.028612] dump_stack+0x244/0x39d [ 936.032260] ? dump_stack_print_info.cold.1+0x20/0x20 [ 936.037472] should_fail.cold.4+0xa/0x17 [ 936.041559] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 936.046790] ? is_bpf_text_address+0xac/0x170 [ 936.051300] ? lock_downgrade+0x900/0x900 [ 936.055459] ? check_preemption_disabled+0x48/0x280 [ 936.060496] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 936.065434] ? kasan_check_read+0x11/0x20 [ 936.065456] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 936.074874] ? rcu_softirq_qs+0x20/0x20 [ 936.074890] ? rcu_softirq_qs+0x20/0x20 [ 936.074902] ? unwind_dump+0x190/0x190 [ 936.074933] ? print_usage_bug+0xc0/0xc0 [ 936.090794] ? kernel_text_address+0x79/0xf0 [ 936.095188] ? __kernel_text_address+0xd/0x40 [ 936.099672] ? __save_stack_trace+0x8d/0xf0 [ 936.103986] __should_failslab+0x124/0x180 [ 936.108223] should_failslab+0x9/0x14 [ 936.112007] kmem_cache_alloc_node_trace+0x5a/0x740 [ 936.117006] ? __kmalloc_node_track_caller+0x50/0x70 [ 936.122094] ? __kmalloc_reserve.isra.40+0x41/0xe0 [ 936.127001] ? __alloc_skb+0x150/0x770 [ 936.130873] ? ovs_ct_limit_cmd_reply_start+0x58/0x1e0 [ 936.136131] ? ovs_ct_limit_cmd_get+0x369/0x1490 [ 936.140876] __kmalloc_node_track_caller+0x3c/0x70 [ 936.145791] __kmalloc_reserve.isra.40+0x41/0xe0 [ 936.150536] pskb_expand_head+0x230/0x10f0 [ 936.154759] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 936.160311] ? check_preemption_disabled+0x48/0x280 [ 936.165312] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 936.170861] ? skb_release_data+0x880/0x880 [ 936.175170] ? lock_is_held_type+0x210/0x210 [ 936.179571] ? perf_trace_lock+0x7a0/0x7a0 [ 936.183795] ? zap_class+0x640/0x640 [ 936.187489] ? __kmalloc_node_track_caller+0x50/0x70 [ 936.192831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 936.198390] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 936.203921] netlink_trim+0x2ea/0x380 [ 936.207703] ? netlink_skb_destructor+0x210/0x210 [ 936.212534] ? ovs_ct_limit_cmd_get+0x112c/0x1490 [ 936.217367] netlink_unicast+0xd0/0x760 [ 936.221361] ? kasan_check_read+0x11/0x20 [ 936.225506] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 936.230769] ? netlink_attachskb+0x9a0/0x9a0 [ 936.235171] ovs_ct_limit_cmd_get+0x1084/0x1490 [ 936.239823] ? __kmalloc+0x15b/0x760 [ 936.243535] ? do_syscall_64+0x1b9/0x820 [ 936.247580] ? ovs_ct_limit_cmd_set+0x1040/0x1040 [ 936.252411] ? zap_class+0x640/0x640 [ 936.256114] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 936.261639] ? check_preemption_disabled+0x48/0x280 [ 936.266648] ? __lock_is_held+0xb5/0x140 [ 936.270701] ? memset+0x31/0x40 [ 936.273986] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 936.279505] ? __nla_parse+0x12c/0x3e0 [ 936.283400] genl_family_rcv_msg+0x8a7/0x11a0 [ 936.288013] ? genl_unregister_family+0x8a0/0x8a0 [ 936.292859] ? lock_downgrade+0x900/0x900 [ 936.297006] ? check_preemption_disabled+0x48/0x280 [ 936.302008] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 936.306918] ? kasan_check_read+0x11/0x20 [ 936.311046] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 936.316339] ? radix_tree_lookup+0x21/0x30 [ 936.320558] genl_rcv_msg+0xc6/0x168 [ 936.324261] netlink_rcv_skb+0x172/0x440 [ 936.328307] ? genl_family_rcv_msg+0x11a0/0x11a0 [ 936.333044] ? netlink_ack+0xb80/0xb80 [ 936.336913] ? down_read+0x8d/0x120 [ 936.340531] genl_rcv+0x28/0x40 [ 936.343794] netlink_unicast+0x5a5/0x760 [ 936.347842] ? netlink_attachskb+0x9a0/0x9a0 [ 936.352235] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 936.357758] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 936.362769] netlink_sendmsg+0xa18/0xfc0 [ 936.366819] ? netlink_unicast+0x760/0x760 [ 936.371300] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 936.376248] ? apparmor_socket_sendmsg+0x29/0x30 [ 936.380989] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 936.386510] ? security_socket_sendmsg+0x94/0xc0 [ 936.391250] ? netlink_unicast+0x760/0x760 [ 936.395475] sock_sendmsg+0xd5/0x120 [ 936.399174] ___sys_sendmsg+0x7fd/0x930 [ 936.403140] ? copy_msghdr_from_user+0x580/0x580 [ 936.407902] ? lock_downgrade+0x900/0x900 [ 936.412043] ? proc_fail_nth_write+0x9e/0x210 [ 936.416528] ? __fget_light+0x2e9/0x430 [ 936.420484] ? fget_raw+0x20/0x20 [ 936.423941] ? find_held_lock+0x36/0x1c0 [ 936.427989] ? kasan_check_write+0x14/0x20 [ 936.432219] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 936.437140] ? wait_for_completion+0x8a0/0x8a0 [ 936.441723] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 936.447243] ? sockfd_lookup_light+0xc5/0x160 [ 936.451739] __sys_sendmsg+0x11d/0x280 [ 936.455611] ? __ia32_sys_shutdown+0x80/0x80 [ 936.460003] ? __sb_end_write+0xd9/0x110 [ 936.464053] ? fput+0x130/0x1a0 [ 936.467321] ? do_syscall_64+0x9a/0x820 [ 936.471294] ? do_syscall_64+0x9a/0x820 [ 936.475258] ? trace_hardirqs_off_caller+0x300/0x300 [ 936.480349] __x64_sys_sendmsg+0x78/0xb0 [ 936.484397] do_syscall_64+0x1b9/0x820 [ 936.488273] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 936.493618] ? syscall_return_slowpath+0x5e0/0x5e0 [ 936.498528] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 936.503374] ? trace_hardirqs_on_caller+0x310/0x310 [ 936.508464] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 936.513485] ? prepare_exit_to_usermode+0x291/0x3b0 [ 936.518489] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 936.523416] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 936.528589] RIP: 0033:0x457569 [ 936.531781] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 936.550674] RSP: 002b:00007fdfe8e43c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 03:59:17 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x40000000000}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:17 executing program 3: getpgid(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000480), 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth1_to_bond\x00', 0x2}, 0x18) ioctl(r1, 0x800000000008982, &(0x7f0000000080)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="290000000600000000000000000000000400000000000000030000000000000000000000000000000069127fbcdab56d0f1f4cb25800000000000021b0c9e06ea050325f77726e71bff4c99eef500ade32c424020f322903f5bad93a"], 0x5c) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="cb2b9b5255175d43fca389e340fe96132329bdfbaa11c5521288697c83a9f28c7ee9d8df70f2c6849d443d5bc274a1f1576385a885b764dc4babfdf01646fa6053ebc9"], &(0x7f0000000800)='./file0//ile0\x00', &(0x7f0000000200)='cgrQup2\x00', 0x2, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000400)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0), 0x8) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x2) r4 = memfd_create(&(0x7f0000000140)="6367726f7570320075b536e08f97e10c4289e296462f3c8fc6a418228027bf4d75931e238b41cf55afcf7dd2284567ed5a738f3382aae6349e10336adf686499eb1d9379eb28", 0x0) syz_open_dev$usbmon(&(0x7f0000000840)='/dev/usbmon#\x00', 0x0, 0x400880) r5 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xbd, &(0x7f00000014c0)}, &(0x7f0000000100)=0x10) io_submit(r6, 0x20000000000000c7, &(0x7f00000000c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x80000000000, r5, &(0x7f0000001000), 0xffffffffffffffe1, 0x9, 0x0, 0x0, 0xffffffffffffff9c}]) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0)={0xffff, 0x5, 0xc65b, 0x9, 0x80, 0x5, 0x1ff, 0x4, 0x20, 0x5, 0x7}, 0xb) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) sendmsg(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @local, 'yam0\x00'}}, 0x80, &(0x7f00000007c0), 0x0, &(0x7f0000000e00)=ANY=[], 0x0, 0x840}, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) memfd_create(&(0x7f0000000640)="000000000000000100000001000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6201004dbea37aabd3eb9888c4c629419f50937a6848e0d281e4ee568c4de9a036c26f1922f64971d4df97fbab04e8ce4938b31dcf259b4bc60901e18661fab8fb2988cd2bc260c2f572353e6bb0a002fc164d4f189b068062d10100000000000000400c0c4ca57b546b9430172ea5362ee0141b3df06ad235e815d89eead3d9473409c09c2e27a952337a24f20188c013123cc0316a33d8b443453773e4a09edd8031124dee13ce9c75288f2ec833c7e66af5b19a00000000000000", 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x0, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x2000005) 03:59:17 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0xc00, [0x305f, 0xa]}, 0x2c) 03:59:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x5000000}, [{}]}, 0x78) 03:59:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80100) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1000000000) sendto(r0, &(0x7f0000000080)="08d84a3521ad092ed2cc6af12b7f2eef7f5290fb6dc9c8cd652cbee26a0f05185e18784528ba43a65b9877a412993f74eb46036e9a5acdd596fa80a9ea9b408abf9ca623002cc792e14b189f4e6f177105a823bfa848664b226cc84f166416ab0a7926f7862a52c6", 0x68, 0x841, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @local}, 0x1, 0x4, 0x0, 0x4}}, 0x80) mq_open(&(0x7f0000000040)='.:\x00', 0x0, 0x0, &(0x7f0000000200)) syz_mount_image$gfs2(&(0x7f0000000100)='gfs2\x00', &(0x7f0000000140)='./file0\x00', 0x100000000, 0x2, &(0x7f00000001c0)=[{&(0x7f00000002c0)="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", 0xfe, 0x7}, {&(0x7f00000003c0)="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", 0x1000}], 0x2000, &(0x7f00000013c0)={[{@data_ordered='data=ordered'}, {@nobarrier='nobarrier'}, {@nodiscard='nodiscard'}, {@noloccookie='noloccookie'}, {@errors_withdraw='errors=withdraw'}, {@quota_on='quota=on'}, {@norecovery='norecovery'}, {@nobarrier='nobarrier'}, {@statfs_quantum={'statfs_quantum', 0x3d, 0x4}}], [{@measure='measure'}]}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 936.558369] RAX: ffffffffffffffda RBX: 00007fdfe8e43c90 RCX: 0000000000457569 [ 936.565618] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 936.572875] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 936.580150] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdfe8e446d4 [ 936.587402] R13: 00000000004c387d R14: 00000000004d56d0 R15: 0000000000000005 03:59:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6000000000000000}, [{}]}, 0x78) 03:59:17 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x9, [0x305f, 0xa]}, 0x2c) 03:59:17 executing program 1 (fault-call:3 fault-nth:7): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x60000000}, [{}]}, 0x78) 03:59:17 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0xb00000000000000, [0x305f, 0xa]}, 0x2c) 03:59:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:17 executing program 0: r0 = socket$inet(0x10, 0x7, 0x7be1) r1 = dup3(r0, r0, 0x80000) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)=0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000001340)={0x5, &(0x7f0000000140)=[{0x9, 0x2}, {0x0, 0xd05f}, {0x1000, 0xe807}, {0x800}, {0x3}]}) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x3, r2}) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0x9, 0x4) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="cf7480216a1abad6c81ab61c227366956cc5cbd89c4810c8a027f2caab0dd217ef3b5abf32436f8abd0057b6f4ec9f5cae008cdc4118e01ba83a5d1ffd118a2f51"}, {&(0x7f0000000200)="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"}, {&(0x7f0000001200)="7a6259e368019efec771c62f20288483f269163b19ba42480d6d7fc909e66401e2afab704cf47d05ca2458c4fa1f47a3891246158aea0d7308e3759d390016253b7b3348c76075259900a9eba51cbb4d884e87a035097b69bf09a832b69abc54528c95881a8364fa6d00afcc90199cf6d18595242a72c058551d78c1124b634e6160df1551f780a7a31151a0d830aa2926fc4e4bbb698926c646f0b46e915b895878f4a3941f00951c096debb3285db4a0da0a95ae2931"}, {&(0x7f00000012c0)="0d836a674f71076ac2ad35a4a4201450a8d99400e7b1e2663f60bcf1f1594a121abb9b96f01250dec5d4c203d6513faa2614598196b90a900ef766925de3c0ada1600ce9d07cea7013acc5d2d5af33b1d591d51a47e4642e9fcbe5af753ccd9c75b5fcb8662f962d3eb609185667d88abef245c63383c1ffd18295"}], 0x234}, 0x4008000) 03:59:18 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x22030000}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:18 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000001700)) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x0, 0x880) read$FUSE(0xffffffffffffffff, &(0x7f0000000440), 0x1000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000003c0)) r3 = request_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000380)='/dev/audio#\x00', 0xfffffffffffffffa) keyctl$get_persistent(0x16, r2, r3) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYBLOB="d3c94c4c5dda85666144f725b0f6702d"], &(0x7f0000000240)=0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={0x0, 0x5}, 0x8) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = accept4(r1, 0x0, &(0x7f0000000080), 0x0) write$FUSE_POLL(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x0, 0x4}, 0x18) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000180)=@assoc_value, 0x8) shutdown(r4, 0x1) 03:59:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x2000000}, [{}]}, 0x78) 03:59:18 executing program 0: setgroups(0x0, &(0x7f0000000500)) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x40041, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000100)=""/109) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x38, &(0x7f0000000000)=""/92, &(0x7f0000000080)=0x5c) 03:59:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x8, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:18 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x700000000000000, [0x305f, 0xa]}, 0x2c) 03:59:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x20000110, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:18 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x44000, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000140)={'bond_slave_1\x00', 0x5}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280), 0x10000030}}], 0x1, 0x0, &(0x7f0000003280)={0x0, 0x1c9c380}) mknodat(r1, &(0x7f0000000040)='./file0\x00', 0xa0, 0x8) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x4) socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x315, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000080)=0x8001, 0x4) 03:59:18 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x18000000, [0x305f, 0xa]}, 0x2c) 03:59:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6000}, [{}]}, 0x78) 03:59:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x3000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0xf0}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:18 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x4000}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:18 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x500, [0x305f, 0xa]}, 0x2c) 03:59:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x3f00000000000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:18 executing program 3: recvfrom(0xffffffffffffffff, &(0x7f00000022c0)=""/4096, 0xffffffffffffffd9, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0x80) r0 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f00000001c0)={0x8000}) ftruncate(r0, 0x5) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x802, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000140), 0x40800fff) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x4}], 0x2dc) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000000c0)) 03:59:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x4800}, [{}]}, 0x78) 03:59:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000140)={{0x0, 0x80, 0x583d, 0xff}, 'syz0\x00', 0x33}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x8, 0x2, 0x1, 0x7}, 'syz1\x00', 0x20}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x4010, r1, 0x39) ioctl$TIOCGLCKTRMIOS(r1, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0xfa8a4f962810a8c1, 0x0) times(&(0x7f0000000040)) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xc) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) [ 938.376174] input:  as /devices/virtual/input/input20 [ 938.391013] input: failed to attach handler leds to device input20, error: -6 03:59:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0xf00000000000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:19 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="882826bbd48192d6acdb016ec3a7c5ed9a1058f271b48f8e1f2af02d64fa10f378510c4a995b44027949b476fa26945402b95702b6307c9885d81a711c77379cec3a029eca9857b2485cb9550dde7986967d10a815445fed697352b7d26a718cadd64a41f9b949f2acf9ab"], &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) r1 = creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) mq_notify(r1, &(0x7f0000477fa0)={0x0, 0x0, 0x0, @thr={&(0x7f0000bc8000), &(0x7f0000589000)}}) dup3(r0, r1, 0x0) 03:59:19 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x1100, [0x305f, 0xa]}, 0x2c) [ 938.448393] input:  as /devices/virtual/input/input21 [ 938.457659] input: failed to attach handler leds to device input21, error: -6 03:59:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x74}, [{}]}, 0x78) 03:59:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000140)={{0x0, 0x80, 0x583d, 0xff}, 'syz0\x00', 0x33}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x8, 0x2, 0x1, 0x7}, 'syz1\x00', 0x20}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x4010, r1, 0x39) ioctl$TIOCGLCKTRMIOS(r1, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0xfa8a4f962810a8c1, 0x0) times(&(0x7f0000000040)) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xc) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) 03:59:19 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x12, [0x305f, 0xa]}, 0x2c) [ 938.690071] input:  as /devices/virtual/input/input22 [ 938.704729] input: failed to attach handler leds to device input22, error: -6 03:59:19 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x8000a0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0xf0ffffff00000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:19 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000380)="0001000000ff000000000000c9030000ec000000010008000000080000000000002400000020000000010000000000006e9b00000000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6d60694e485e4d41595f4512a7432c000000"]) 03:59:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x3800000000000000}, [{}]}, 0x78) 03:59:19 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x10, [0x305f, 0xa]}, 0x2c) 03:59:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x74}, [{}]}, 0x78) 03:59:19 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x1400000000000000, [0x305f, 0xa]}, 0x2c) [ 939.246682] sg_write: 25 callbacks suppressed [ 939.246731] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 939.246731] program syz-executor0 not setting count and/or reply_len properly [ 939.252293] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 939.252293] program syz-executor4 not setting count and/or reply_len properly 03:59:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0xfffffffffffff000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x8000a0ffffffff}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:20 executing program 0: openat$userio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/userio\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$binder(&(0x7f00000004c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000180)=0x1) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x64, 0x10}, &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 939.387796] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 939.387796] program syz-executor4 not setting count and/or reply_len properly 03:59:20 executing program 3: r0 = socket(0x1e, 0x80001, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r1, 0x343, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080), 0x121}]) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) getpgid(r2) sched_setparam(r2, &(0x7f0000000100)=0x7) 03:59:20 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x8000a0ffffffff, [0x305f, 0xa]}, 0x2c) [ 939.540417] binder: 15065:15073 ioctl 2270 200001c0 returned -22 [ 939.993111] binder: 15065:15080 ioctl 2270 200001c0 returned -22 03:59:20 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0xffffffffa0008000}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x7a00000000000000}, [{}]}, 0x78) 03:59:20 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000012c0)={r2, &(0x7f00000002c0)=""/4096}) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x6d68, 0x1, 0x3}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000180)={r4, @in6={{0xa, 0x4e23, 0xffffffff80000000, @remote, 0x100000000}}}, &(0x7f0000000240)=0x84) mmap$binder(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0, 0x8092, r3, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff7000/0x3000)=nil) 03:59:20 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x600000000000000, [0x305f, 0xa]}, 0x2c) 03:59:20 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="eeee47b2a008fcdf153204dc17f564cb079a81a009ede199fa0e4c6440a8467976ecaa9ffcef9f", 0x27}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x101800, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001a80)={'vcan0\x00', 0x0}) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f00000001c0)) r5 = fcntl$getown(r2, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f00000004c0)={{0x4, 0x2, 0x8c6, 0xe000, '\x00', 0x80000000}, 0x1, 0x1, 0x800, r5, 0x5, 0x80000000, 'syz1\x00', &(0x7f0000000440)=["2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e333265300", 'vcan0\x00', '/dev/audio\x00', '&,keyring\x00', '-*[system\x00'], 0x6b, [], [0x3, 0x3ff, 0x12e3, 0x3]}) recvfrom$packet(r3, &(0x7f0000000280)=""/206, 0xce, 0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x4, r4, 0x1, 0x20, 0x6, @random="18ee0210bf92"}, 0x14) socketpair(0x9, 0x5, 0x10000, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") sendfile(r2, r8, &(0x7f0000000180)=0xf010b, 0x100006e0a) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0xc) r13 = geteuid() stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r8, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000f40)={0x0, 0x0}, &(0x7f0000000f80)=0xc) stat(&(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000016c0)={{{@in6=@mcast1, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000017c0)=0xe8) lstat(&(0x7f0000001800)='./file0\x00', &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f00000018c0)=0x0, &(0x7f0000001900), &(0x7f0000001940)) getgroups(0x2, &(0x7f0000001980)=[0xffffffffffffffff, 0xffffffffffffffff]) fstat(r6, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000003200), &(0x7f0000000680), &(0x7f0000003180)=0x0) getgroups(0x4, &(0x7f0000002bc0)=[0xee00, 0x0, 0x0, 0xffffffffffffffff]) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000002c00)={0x0, 0x0}, &(0x7f0000002c40)=0xc) stat(&(0x7f0000002c80)='./file0\x00', &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002d40)='./file0\x00', &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r9, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r6, &(0x7f0000003000)=[{&(0x7f0000000600)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000680), 0x0, &(0x7f0000002b40)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="68cd830a7fcac3a8000000000130b530d52c271bd96800000000000000000000000000000000000000", @ANYRES32=r3, @ANYRES32=r8, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r6, @ANYRES32=r0, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00'], 0x68, 0x80}, {&(0x7f0000000940)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000c40)=[{&(0x7f00000009c0)="84c5ceeb6bb4743b8e7e037a823e005bdaa94a6b85ac4651e4cbdeadf004662abb9fa7f1cb582832e56850dd1c992835740c217d125f", 0x36}, {&(0x7f0000000a00)="fc7bf980b5806f4eb573c53480eb143fea894abb2c8f87326190e67b09b5904737c007eb", 0x24}, {&(0x7f0000000a40)="8accff89acf10ae605ce34014c79e7bef474b29e5c83f09246dbaddd552bd47af4d654253071f3339f2d408965cfcb44916b1f6c812eba73debdcc38a55c82b68abeaed11d5e48347c6d5df72be2d2e779074a28647ab0b7186b586d78e82a7efd", 0x61}, {&(0x7f0000000ac0)="511f753fe875bb286678ebc56c78e86d7d9cbb4d95f9a84a8cf5d4c4ecc1fe5237f9b93e2f5858f80b6b7915882ce451fe5450d2d35d631e979f13dcacb78a782e25c8f941ab325d2f72143ebb823b4e21b818c33b6c4113493eb117db6ed603fc9eefabda2516b9d4bb09c5ad847644b7cd42448638004a32f6f1bf29dc", 0x7e}, {&(0x7f0000000b40)="865d6c739512a598762158947bf81a6e00db5f36c55fea75426f33dda5f46e9659e3c986a86d4ac80aaf83e1474956ec773af2ca2d9944f363ac6017e9c5b77f6df72f13f204846002f6e36acc3ba5c68e813d397f1186ff563fc464ea57bfc35976d2060e48496827", 0x69}, {&(0x7f0000001ac0)="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", 0x1000}, {&(0x7f0000000bc0)="710ad9b9a1abffff6c6bb7a30eee7930adaa1cd6446498c2fa4e12e367436cf2ff96aba562896a2e6cc5c4f2e1d20555a2d736f3eea9def10a5261cf22bd7edfe00b082d7dd8cedb8e3db2d4cd22", 0x4e}], 0x7, 0x0, 0x0, 0x44085}, {&(0x7f0000000cc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000d40)="61804fea8f1faecd8e782254fff89990526b120798bece64ac746229bfd9c39822997c4e2336563de6b978bc78890f0238ae3d4c7c4c9c7df374000b6b40a565c3f8", 0x42}], 0x1, &(0x7f0000003240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="00000000200000000000000001000000020000007cc00f1915d63ac42b60d2560778242559488449a453939f44f4c92258997517adc692e09340f6d20b1106afc5a2f0424c063f8a654956d2d56fbbb8bb029a4893d04d1c7596bf32c56ccdaf042633ee72484dcaa048d56d29a93eb23e850b9dcadc8b7ef2d2f16c2f621046a211a6059db5cd7b3ecb156cd7473e3d8a261d201a41", @ANYRES32=r5, @ANYRES32=r15, @ANYRES32=r16, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r17, @ANYRES32=r18, @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x4}, {&(0x7f0000001100)=@file={0x2f91084a7fb82dc3, './file0\x00'}, 0x6e, &(0x7f0000001640)=[{&(0x7f0000001180)="d035994ee5dd3c5fa34d99e2fd1bc31094bcf147b52ba8c6ead1bcd3e741f08e42d985a9a4f605232d85e1d8f6db5dfb11c8960308afc35d8baa2c092d4b83e7c4f81bcacd4c334b3fd1ce3aabf85b53830545b6d028ecc79cb0241116805c8eb79ec1ba2bc396b2db32c05d58040e00f0364adf54d6998d0fa3eb4621b92604eb8c78f618d52253d3c493f687651ed0b2436cb16e24b9f54b5ac0fb741c2988ac3e4f2a4d773427e65b64ce", 0xac}, {&(0x7f0000001240)="1c7422a9d82434d25b7f34614525b0cc89339a12958883f6f8412ba9053bbd96aebeae65a6930a21675c7443768afadaa3e4a18e8942365dee", 0x39}, {&(0x7f0000001280)="9798a1d5858bc6b820b83274a4b83ca682afaf007c5cd05108f7613bc296789543572659930a9535613b9bb342d14b5834d94cf2a69103cb7ec95fc0b542219b17a8a63108bd62a447fd8bf5a4f8cf99ca293a0fe2b0ac17080de16864098baa9875e4ef92d53e28c974ea2278b0d893c889bddbc397eff8454c7bce4e5106de91d6db733e60bcf3639162b6855cb924cab0bad431bd6e162beb5d041765de7e7983d48df427ec3e1774702df43978d2d2a3f0d36ccbd9ac8502cad67b37acdb10e5043bd7553ab7717e", 0xca}, {&(0x7f0000001380)="b739c677d6e748088120960c01e30d95f3a2cedd9349e722c71a548a52000d05fa79d9e652b80a332cb12365b1ff4ac7cc206dd1cf95c2150c184e15a5054bbcc388e38cdbdd051d1ba48e31266b5c3972ee2ee4bdba2d6d7bd74b03185b8c5e70327623d7f7ec5e696f8e67fd891631e2a0d5d467f098d419f4e5f4fcf8930f0b68b385251c63f79a0dc4f52f66a32ad32a464ca1cfe67ce1ec6c2c8d642cb2b292e2e9478e91c0c76e8d0ea7b14ac6c549ba91e44cce70808837ad70f542b8200ddac5d2c76ab618e666975a", 0xcd}, {&(0x7f0000001480)="0a3e921aa60db6e5fa54721edbaeba8fc292e7acc506bb51ec43b70c64a7bc6cc607b37dcaff435671108f7dadef91722b5bbef2904292f37517f5e23515004bff78961e7ce5e8383fcb00ebe39a701c38dfe8ef97ba4ed3ae3f106c607454e0ca8e70604b7088bc779963918a6bf495228d1be2eef81d6f545b439c8cd92d32172857321615f97940c47cb265f8c7dc6ed3335495894361078d6dd3870e53cd891a37b2e06ea6ab0ccf1522721ff073a5261660ce42947d75a87d282a59e7eb1ad5004b27fba2eebd532d7d28a40a5b6779acf6fca24c434c33f4648ec926c32a47d53a", 0xe4}, {&(0x7f0000001580)="9b55fcd0c8a95af31b111e7d94ddd6f360744b06000d31aa85dabb25826b04cf2718", 0x22}, {&(0x7f00000015c0)="234f3b7db3a409bc54b5f06692115d80004413c31a6c2b5d91b4989190150c2bf787206c455ad03c3ba6c2da466956dcf97c3ee27909ed94ce0381f3af697a8645eb9a5d05244346d85116a6a655f7eb48e7b1d6fab7586bc424ae75bfec5785dd8d69", 0x63}], 0x7, &(0x7f0000002e80)=[@cred={0x20, 0x1, 0x2, r5, r19, r20}, @rights={0x30, 0x1, 0x1, [r8, r9, r3, r9, r8, r9, r3]}, @cred={0x20, 0x1, 0x2, r5, r21, r22}, @cred={0x20, 0x1, 0x2, r5, r23, r24}, @rights={0x28, 0x1, 0x1, [r6, r9, r10, r0, r2, r1]}, @rights={0x18, 0x1, 0x1, [r8, r1]}, @cred={0x20, 0x1, 0x2, r5, r25, r26}, @rights={0x18, 0x1, 0x1, [r6]}, @cred={0x20, 0x1, 0x2, r5, r27, r28}, @cred={0x20, 0x1, 0x2, r5, r29, r30}], 0x148, 0x800}], 0x4, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000380)={{0x0, @loopback, 0x4e21, 0x2, 'none\x00', 0x1, 0x100, 0x50}, {@rand_addr=0x6, 0x4e24, 0x3, 0x22a396e0, 0x2ac, 0x1}}, 0x44) 03:59:20 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000140)={0x27, 0x0, 0x0, 0x0, 0x0, 0x100000000, "75b782e4ad88b89d1fc31916080000000788ccfc7f660510420aaa96759ecbc36eb9bb12b6124793608dd0e7316d1d4f4dbac39877e4ac714b7ecefa8a934a", 0x1}, 0x60) close(r0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r2, &(0x7f00000001c0)="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", 0x1000, 0x804, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmsg$can_raw(r1, &(0x7f0000001300)={&(0x7f0000001200), 0x10, &(0x7f00000012c0)={&(0x7f0000001240)=@canfd={{0x0, 0x4, 0x1, 0x1}, 0x31, 0x3, 0x0, 0x0, "ea5274448bbc10fa95d4cd77700d4aaf12d1c38e8759183cba38d5b4d682db9c6df8662d063c28bc144c3eee3f16562748d9148a24f0655593062b92724d4eab"}, 0x48}}, 0x80) lsetxattr$security_smack_entry(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.SMACK64MMAP\x00', &(0x7f00000011c0)='%selinux\x00', 0x9, 0x1) [ 940.168467] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 940.168467] program syz-executor4 not setting count and/or reply_len properly 03:59:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0xf0ffff}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:20 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="eeee47b2a008fcdf153204dc17f564cb079a81a009ede199fa0e4c6440a8467976ecaa9ffcef9f", 0x27}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x101800, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001a80)={'vcan0\x00', 0x0}) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f00000001c0)) r5 = fcntl$getown(r2, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f00000004c0)={{0x4, 0x2, 0x8c6, 0xe000, '\x00', 0x80000000}, 0x1, 0x1, 0x800, r5, 0x5, 0x80000000, 'syz1\x00', &(0x7f0000000440)=["2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e333265300", 'vcan0\x00', '/dev/audio\x00', '&,keyring\x00', '-*[system\x00'], 0x6b, [], [0x3, 0x3ff, 0x12e3, 0x3]}) recvfrom$packet(r3, &(0x7f0000000280)=""/206, 0xce, 0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x4, r4, 0x1, 0x20, 0x6, @random="18ee0210bf92"}, 0x14) socketpair(0x9, 0x5, 0x10000, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") sendfile(r2, r8, &(0x7f0000000180)=0xf010b, 0x100006e0a) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0xc) r13 = geteuid() stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r8, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000f40)={0x0, 0x0}, &(0x7f0000000f80)=0xc) stat(&(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000016c0)={{{@in6=@mcast1, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000017c0)=0xe8) lstat(&(0x7f0000001800)='./file0\x00', &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f00000018c0)=0x0, &(0x7f0000001900), &(0x7f0000001940)) getgroups(0x2, &(0x7f0000001980)=[0xffffffffffffffff, 0xffffffffffffffff]) fstat(r6, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000003200), &(0x7f0000000680), &(0x7f0000003180)=0x0) getgroups(0x4, &(0x7f0000002bc0)=[0xee00, 0x0, 0x0, 0xffffffffffffffff]) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000002c00)={0x0, 0x0}, &(0x7f0000002c40)=0xc) stat(&(0x7f0000002c80)='./file0\x00', &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002d40)='./file0\x00', &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r9, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r6, &(0x7f0000003000)=[{&(0x7f0000000600)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000680), 0x0, &(0x7f0000002b40)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="68cd830a7fcac3a8000000000130b530d52c271bd96800000000000000000000000000000000000000", @ANYRES32=r3, @ANYRES32=r8, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r6, @ANYRES32=r0, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00'], 0x68, 0x80}, {&(0x7f0000000940)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000c40)=[{&(0x7f00000009c0)="84c5ceeb6bb4743b8e7e037a823e005bdaa94a6b85ac4651e4cbdeadf004662abb9fa7f1cb582832e56850dd1c992835740c217d125f", 0x36}, {&(0x7f0000000a00)="fc7bf980b5806f4eb573c53480eb143fea894abb2c8f87326190e67b09b5904737c007eb", 0x24}, {&(0x7f0000000a40)="8accff89acf10ae605ce34014c79e7bef474b29e5c83f09246dbaddd552bd47af4d654253071f3339f2d408965cfcb44916b1f6c812eba73debdcc38a55c82b68abeaed11d5e48347c6d5df72be2d2e779074a28647ab0b7186b586d78e82a7efd", 0x61}, {&(0x7f0000000ac0)="511f753fe875bb286678ebc56c78e86d7d9cbb4d95f9a84a8cf5d4c4ecc1fe5237f9b93e2f5858f80b6b7915882ce451fe5450d2d35d631e979f13dcacb78a782e25c8f941ab325d2f72143ebb823b4e21b818c33b6c4113493eb117db6ed603fc9eefabda2516b9d4bb09c5ad847644b7cd42448638004a32f6f1bf29dc", 0x7e}, {&(0x7f0000000b40)="865d6c739512a598762158947bf81a6e00db5f36c55fea75426f33dda5f46e9659e3c986a86d4ac80aaf83e1474956ec773af2ca2d9944f363ac6017e9c5b77f6df72f13f204846002f6e36acc3ba5c68e813d397f1186ff563fc464ea57bfc35976d2060e48496827", 0x69}, {&(0x7f0000001ac0)="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", 0x1000}, {&(0x7f0000000bc0)="710ad9b9a1abffff6c6bb7a30eee7930adaa1cd6446498c2fa4e12e367436cf2ff96aba562896a2e6cc5c4f2e1d20555a2d736f3eea9def10a5261cf22bd7edfe00b082d7dd8cedb8e3db2d4cd22", 0x4e}], 0x7, 0x0, 0x0, 0x44085}, {&(0x7f0000000cc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000d40)="61804fea8f1faecd8e782254fff89990526b120798bece64ac746229bfd9c39822997c4e2336563de6b978bc78890f0238ae3d4c7c4c9c7df374000b6b40a565c3f8", 0x42}], 0x1, &(0x7f0000003240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="00000000200000000000000001000000020000007cc00f1915d63ac42b60d2560778242559488449a453939f44f4c92258997517adc692e09340f6d20b1106afc5a2f0424c063f8a654956d2d56fbbb8bb029a4893d04d1c7596bf32c56ccdaf042633ee72484dcaa048d56d29a93eb23e850b9dcadc8b7ef2d2f16c2f621046a211a6059db5cd7b3ecb156cd7473e3d8a261d201a41", @ANYRES32=r5, @ANYRES32=r15, @ANYRES32=r16, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r17, @ANYRES32=r18, @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x4}, {&(0x7f0000001100)=@file={0x2f91084a7fb82dc3, './file0\x00'}, 0x6e, &(0x7f0000001640)=[{&(0x7f0000001180)="d035994ee5dd3c5fa34d99e2fd1bc31094bcf147b52ba8c6ead1bcd3e741f08e42d985a9a4f605232d85e1d8f6db5dfb11c8960308afc35d8baa2c092d4b83e7c4f81bcacd4c334b3fd1ce3aabf85b53830545b6d028ecc79cb0241116805c8eb79ec1ba2bc396b2db32c05d58040e00f0364adf54d6998d0fa3eb4621b92604eb8c78f618d52253d3c493f687651ed0b2436cb16e24b9f54b5ac0fb741c2988ac3e4f2a4d773427e65b64ce", 0xac}, {&(0x7f0000001240)="1c7422a9d82434d25b7f34614525b0cc89339a12958883f6f8412ba9053bbd96aebeae65a6930a21675c7443768afadaa3e4a18e8942365dee", 0x39}, {&(0x7f0000001280)="9798a1d5858bc6b820b83274a4b83ca682afaf007c5cd05108f7613bc296789543572659930a9535613b9bb342d14b5834d94cf2a69103cb7ec95fc0b542219b17a8a63108bd62a447fd8bf5a4f8cf99ca293a0fe2b0ac17080de16864098baa9875e4ef92d53e28c974ea2278b0d893c889bddbc397eff8454c7bce4e5106de91d6db733e60bcf3639162b6855cb924cab0bad431bd6e162beb5d041765de7e7983d48df427ec3e1774702df43978d2d2a3f0d36ccbd9ac8502cad67b37acdb10e5043bd7553ab7717e", 0xca}, {&(0x7f0000001380)="b739c677d6e748088120960c01e30d95f3a2cedd9349e722c71a548a52000d05fa79d9e652b80a332cb12365b1ff4ac7cc206dd1cf95c2150c184e15a5054bbcc388e38cdbdd051d1ba48e31266b5c3972ee2ee4bdba2d6d7bd74b03185b8c5e70327623d7f7ec5e696f8e67fd891631e2a0d5d467f098d419f4e5f4fcf8930f0b68b385251c63f79a0dc4f52f66a32ad32a464ca1cfe67ce1ec6c2c8d642cb2b292e2e9478e91c0c76e8d0ea7b14ac6c549ba91e44cce70808837ad70f542b8200ddac5d2c76ab618e666975a", 0xcd}, {&(0x7f0000001480)="0a3e921aa60db6e5fa54721edbaeba8fc292e7acc506bb51ec43b70c64a7bc6cc607b37dcaff435671108f7dadef91722b5bbef2904292f37517f5e23515004bff78961e7ce5e8383fcb00ebe39a701c38dfe8ef97ba4ed3ae3f106c607454e0ca8e70604b7088bc779963918a6bf495228d1be2eef81d6f545b439c8cd92d32172857321615f97940c47cb265f8c7dc6ed3335495894361078d6dd3870e53cd891a37b2e06ea6ab0ccf1522721ff073a5261660ce42947d75a87d282a59e7eb1ad5004b27fba2eebd532d7d28a40a5b6779acf6fca24c434c33f4648ec926c32a47d53a", 0xe4}, {&(0x7f0000001580)="9b55fcd0c8a95af31b111e7d94ddd6f360744b06000d31aa85dabb25826b04cf2718", 0x22}, {&(0x7f00000015c0)="234f3b7db3a409bc54b5f06692115d80004413c31a6c2b5d91b4989190150c2bf787206c455ad03c3ba6c2da466956dcf97c3ee27909ed94ce0381f3af697a8645eb9a5d05244346d85116a6a655f7eb48e7b1d6fab7586bc424ae75bfec5785dd8d69", 0x63}], 0x7, &(0x7f0000002e80)=[@cred={0x20, 0x1, 0x2, r5, r19, r20}, @rights={0x30, 0x1, 0x1, [r8, r9, r3, r9, r8, r9, r3]}, @cred={0x20, 0x1, 0x2, r5, r21, r22}, @cred={0x20, 0x1, 0x2, r5, r23, r24}, @rights={0x28, 0x1, 0x1, [r6, r9, r10, r0, r2, r1]}, @rights={0x18, 0x1, 0x1, [r8, r1]}, @cred={0x20, 0x1, 0x2, r5, r25, r26}, @rights={0x18, 0x1, 0x1, [r6]}, @cred={0x20, 0x1, 0x2, r5, r27, r28}, @cred={0x20, 0x1, 0x2, r5, r29, r30}], 0x148, 0x800}], 0x4, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000380)={{0x0, @loopback, 0x4e21, 0x2, 'none\x00', 0x1, 0x100, 0x50}, {@rand_addr=0x6, 0x4e24, 0x3, 0x22a396e0, 0x2ac, 0x1}}, 0x44) 03:59:20 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x2000000, [0x305f, 0xa]}, 0x2c) [ 940.288075] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 940.288075] program syz-executor4 not setting count and/or reply_len properly 03:59:20 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="eeee47b2a008fcdf153204dc17f564cb079a81a009ede199fa0e4c6440a8467976ecaa9ffcef9f", 0x27}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x101800, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001a80)={'vcan0\x00', 0x0}) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f00000001c0)) r5 = fcntl$getown(r2, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f00000004c0)={{0x4, 0x2, 0x8c6, 0xe000, '\x00', 0x80000000}, 0x1, 0x1, 0x800, r5, 0x5, 0x80000000, 'syz1\x00', &(0x7f0000000440)=["2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e333265300", 'vcan0\x00', '/dev/audio\x00', '&,keyring\x00', '-*[system\x00'], 0x6b, [], [0x3, 0x3ff, 0x12e3, 0x3]}) recvfrom$packet(r3, &(0x7f0000000280)=""/206, 0xce, 0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x4, r4, 0x1, 0x20, 0x6, @random="18ee0210bf92"}, 0x14) socketpair(0x9, 0x5, 0x10000, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") sendfile(r2, r8, &(0x7f0000000180)=0xf010b, 0x100006e0a) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0xc) r13 = geteuid() stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r8, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000f40)={0x0, 0x0}, &(0x7f0000000f80)=0xc) stat(&(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000016c0)={{{@in6=@mcast1, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000017c0)=0xe8) lstat(&(0x7f0000001800)='./file0\x00', &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f00000018c0)=0x0, &(0x7f0000001900), &(0x7f0000001940)) getgroups(0x2, &(0x7f0000001980)=[0xffffffffffffffff, 0xffffffffffffffff]) fstat(r6, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000003200), &(0x7f0000000680), &(0x7f0000003180)=0x0) getgroups(0x4, &(0x7f0000002bc0)=[0xee00, 0x0, 0x0, 0xffffffffffffffff]) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000002c00)={0x0, 0x0}, &(0x7f0000002c40)=0xc) stat(&(0x7f0000002c80)='./file0\x00', &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002d40)='./file0\x00', &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r9, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r6, &(0x7f0000003000)=[{&(0x7f0000000600)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000680), 0x0, &(0x7f0000002b40)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="68cd830a7fcac3a8000000000130b530d52c271bd96800000000000000000000000000000000000000", @ANYRES32=r3, @ANYRES32=r8, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r6, @ANYRES32=r0, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00'], 0x68, 0x80}, {&(0x7f0000000940)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000c40)=[{&(0x7f00000009c0)="84c5ceeb6bb4743b8e7e037a823e005bdaa94a6b85ac4651e4cbdeadf004662abb9fa7f1cb582832e56850dd1c992835740c217d125f", 0x36}, {&(0x7f0000000a00)="fc7bf980b5806f4eb573c53480eb143fea894abb2c8f87326190e67b09b5904737c007eb", 0x24}, {&(0x7f0000000a40)="8accff89acf10ae605ce34014c79e7bef474b29e5c83f09246dbaddd552bd47af4d654253071f3339f2d408965cfcb44916b1f6c812eba73debdcc38a55c82b68abeaed11d5e48347c6d5df72be2d2e779074a28647ab0b7186b586d78e82a7efd", 0x61}, {&(0x7f0000000ac0)="511f753fe875bb286678ebc56c78e86d7d9cbb4d95f9a84a8cf5d4c4ecc1fe5237f9b93e2f5858f80b6b7915882ce451fe5450d2d35d631e979f13dcacb78a782e25c8f941ab325d2f72143ebb823b4e21b818c33b6c4113493eb117db6ed603fc9eefabda2516b9d4bb09c5ad847644b7cd42448638004a32f6f1bf29dc", 0x7e}, {&(0x7f0000000b40)="865d6c739512a598762158947bf81a6e00db5f36c55fea75426f33dda5f46e9659e3c986a86d4ac80aaf83e1474956ec773af2ca2d9944f363ac6017e9c5b77f6df72f13f204846002f6e36acc3ba5c68e813d397f1186ff563fc464ea57bfc35976d2060e48496827", 0x69}, {&(0x7f0000001ac0)="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", 0x1000}, {&(0x7f0000000bc0)="710ad9b9a1abffff6c6bb7a30eee7930adaa1cd6446498c2fa4e12e367436cf2ff96aba562896a2e6cc5c4f2e1d20555a2d736f3eea9def10a5261cf22bd7edfe00b082d7dd8cedb8e3db2d4cd22", 0x4e}], 0x7, 0x0, 0x0, 0x44085}, {&(0x7f0000000cc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000d40)="61804fea8f1faecd8e782254fff89990526b120798bece64ac746229bfd9c39822997c4e2336563de6b978bc78890f0238ae3d4c7c4c9c7df374000b6b40a565c3f8", 0x42}], 0x1, &(0x7f0000003240)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="00000000200000000000000001000000020000007cc00f1915d63ac42b60d2560778242559488449a453939f44f4c92258997517adc692e09340f6d20b1106afc5a2f0424c063f8a654956d2d56fbbb8bb029a4893d04d1c7596bf32c56ccdaf042633ee72484dcaa048d56d29a93eb23e850b9dcadc8b7ef2d2f16c2f621046a211a6059db5cd7b3ecb156cd7473e3d8a261d201a41", @ANYRES32=r5, @ANYRES32=r15, @ANYRES32=r16, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r17, @ANYRES32=r18, @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x4}, {&(0x7f0000001100)=@file={0x2f91084a7fb82dc3, './file0\x00'}, 0x6e, &(0x7f0000001640)=[{&(0x7f0000001180)="d035994ee5dd3c5fa34d99e2fd1bc31094bcf147b52ba8c6ead1bcd3e741f08e42d985a9a4f605232d85e1d8f6db5dfb11c8960308afc35d8baa2c092d4b83e7c4f81bcacd4c334b3fd1ce3aabf85b53830545b6d028ecc79cb0241116805c8eb79ec1ba2bc396b2db32c05d58040e00f0364adf54d6998d0fa3eb4621b92604eb8c78f618d52253d3c493f687651ed0b2436cb16e24b9f54b5ac0fb741c2988ac3e4f2a4d773427e65b64ce", 0xac}, {&(0x7f0000001240)="1c7422a9d82434d25b7f34614525b0cc89339a12958883f6f8412ba9053bbd96aebeae65a6930a21675c7443768afadaa3e4a18e8942365dee", 0x39}, {&(0x7f0000001280)="9798a1d5858bc6b820b83274a4b83ca682afaf007c5cd05108f7613bc296789543572659930a9535613b9bb342d14b5834d94cf2a69103cb7ec95fc0b542219b17a8a63108bd62a447fd8bf5a4f8cf99ca293a0fe2b0ac17080de16864098baa9875e4ef92d53e28c974ea2278b0d893c889bddbc397eff8454c7bce4e5106de91d6db733e60bcf3639162b6855cb924cab0bad431bd6e162beb5d041765de7e7983d48df427ec3e1774702df43978d2d2a3f0d36ccbd9ac8502cad67b37acdb10e5043bd7553ab7717e", 0xca}, {&(0x7f0000001380)="b739c677d6e748088120960c01e30d95f3a2cedd9349e722c71a548a52000d05fa79d9e652b80a332cb12365b1ff4ac7cc206dd1cf95c2150c184e15a5054bbcc388e38cdbdd051d1ba48e31266b5c3972ee2ee4bdba2d6d7bd74b03185b8c5e70327623d7f7ec5e696f8e67fd891631e2a0d5d467f098d419f4e5f4fcf8930f0b68b385251c63f79a0dc4f52f66a32ad32a464ca1cfe67ce1ec6c2c8d642cb2b292e2e9478e91c0c76e8d0ea7b14ac6c549ba91e44cce70808837ad70f542b8200ddac5d2c76ab618e666975a", 0xcd}, {&(0x7f0000001480)="0a3e921aa60db6e5fa54721edbaeba8fc292e7acc506bb51ec43b70c64a7bc6cc607b37dcaff435671108f7dadef91722b5bbef2904292f37517f5e23515004bff78961e7ce5e8383fcb00ebe39a701c38dfe8ef97ba4ed3ae3f106c607454e0ca8e70604b7088bc779963918a6bf495228d1be2eef81d6f545b439c8cd92d32172857321615f97940c47cb265f8c7dc6ed3335495894361078d6dd3870e53cd891a37b2e06ea6ab0ccf1522721ff073a5261660ce42947d75a87d282a59e7eb1ad5004b27fba2eebd532d7d28a40a5b6779acf6fca24c434c33f4648ec926c32a47d53a", 0xe4}, {&(0x7f0000001580)="9b55fcd0c8a95af31b111e7d94ddd6f360744b06000d31aa85dabb25826b04cf2718", 0x22}, {&(0x7f00000015c0)="234f3b7db3a409bc54b5f06692115d80004413c31a6c2b5d91b4989190150c2bf787206c455ad03c3ba6c2da466956dcf97c3ee27909ed94ce0381f3af697a8645eb9a5d05244346d85116a6a655f7eb48e7b1d6fab7586bc424ae75bfec5785dd8d69", 0x63}], 0x7, &(0x7f0000002e80)=[@cred={0x20, 0x1, 0x2, r5, r19, r20}, @rights={0x30, 0x1, 0x1, [r8, r9, r3, r9, r8, r9, r3]}, @cred={0x20, 0x1, 0x2, r5, r21, r22}, @cred={0x20, 0x1, 0x2, r5, r23, r24}, @rights={0x28, 0x1, 0x1, [r6, r9, r10, r0, r2, r1]}, @rights={0x18, 0x1, 0x1, [r8, r1]}, @cred={0x20, 0x1, 0x2, r5, r25, r26}, @rights={0x18, 0x1, 0x1, [r6]}, @cred={0x20, 0x1, 0x2, r5, r27, r28}, @cred={0x20, 0x1, 0x2, r5, r29, r30}], 0x148, 0x800}], 0x4, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000380)={{0x0, @loopback, 0x4e21, 0x2, 'none\x00', 0x1, 0x100, 0x50}, {@rand_addr=0x6, 0x4e24, 0x3, 0x22a396e0, 0x2ac, 0x1}}, 0x44) 03:59:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x8000a0}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:21 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0xfffffdef}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:21 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x1300, [0x305f, 0xa]}, 0x2c) 03:59:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x68}, [{}]}, 0x78) 03:59:21 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='memory.high\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000300)='pids.current\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80007, 0xfffffffffffffff9) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 03:59:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0xf0ffffff}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhci\x00', 0x0, 0x0) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f00000002c0)={0x4, 0x0, [{}, {}, {}, {}]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000140)=0x7ff, 0x4) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x101200, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000240)=0xc) migrate_pages(r4, 0xffffffffffffa2fd, &(0x7f0000000340)=0x4, &(0x7f0000000440)=0x401) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x5}) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x3) 03:59:21 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000480)={{0x6, 0x8001}, {0x1ff, 0xfff}, 0x4, 0x2}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = getpid() wait4(r1, &(0x7f0000000100), 0x1000000, &(0x7f0000000500)) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x1) creat(&(0x7f0000000440)='./bus\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xffffffffffffffdb) fcntl$setstatus(r0, 0x4, 0x4400) perf_event_open(&(0x7f0000000280)={0x5, 0x70, 0x1, 0xfce, 0x0, 0x7fff, 0x0, 0x2, 0x800, 0x9, 0x580, 0x7, 0x0, 0xffffffff, 0x0, 0x1ff, 0x7, 0x7, 0x0, 0x2, 0x6, 0x100000000, 0x40, 0xc3b, 0x100000000, 0x400, 0x0, 0x5, 0x4, 0x3a, 0x8, 0xfffffffffffff284, 0x8, 0x2, 0xf51, 0x1b82, 0x40, 0x3f, 0x0, 0x30000000000000, 0x2, @perf_config_ext={0x3ff, 0x4}, 0x46, 0x0, 0xffffffffffff8000, 0x4, 0x10001, 0x7, 0xe66a}, r1, 0x2, r2, 0xb) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.procs\x00', 0x2, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000000c0)) openat$cgroup_procs(r3, &(0x7f0000000400)='tasks\x00', 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f00000005c0)={0x10005, 0x0, &(0x7f0000fee000/0x11000)=nil}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000180), &(0x7f0000000140)=0x14) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f0000000300)=""/194) fcntl$setstatus(r6, 0x4, 0x6100) sendfile(r6, r5, &(0x7f0000000040), 0x100000001) [ 941.021724] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 941.021724] program syz-executor4 not setting count and/or reply_len properly 03:59:21 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0xffffffffa0008000, [0x305f, 0xa]}, 0x2c) 03:59:21 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x40100000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pread64(r1, &(0x7f0000000340)=""/39, 0x4, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="280300000001000000000029566f8d6123a454f949bdd864754b3396abaa0fbfc3000000000000bb0600000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b00000000003026482dce3141b6fc2f6b456e46ee455292b886b087a2bf2047c38a81056976b6910cf4f65b954dab077e33eb217d47b66f2a4f5b3f63e953e817fcb09ff0921d23d9e128047e57772c8b90fb4b39469fcaa6f43a2f3ff72e2626fb8b1119613c55d7fa98d89fed4491f2bfa713db965cc6d8c7ec03ccf93bc988eea0"], 0x36d}}, 0x0) dup2(r0, r1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 03:59:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x3f00}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 941.145435] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 941.145435] program syz-executor4 not setting count and/or reply_len properly 03:59:21 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x13, [0x305f, 0xa]}, 0x2c) 03:59:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x400000000000000}, [{}]}, 0x78) [ 941.373016] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 941.373016] program syz-executor4 not setting count and/or reply_len properly [ 941.452533] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 941.452533] program syz-executor4 not setting count and/or reply_len properly 03:59:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0xf00}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:22 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000080)="00004600000f00000000", 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x12) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) execveat(r0, &(0x7f0000000100)='\x00', &(0x7f0000000300)=[&(0x7f0000000180)='-!^\x00', &(0x7f00000001c0)='lo.cgroup{\x00', &(0x7f0000000200)='Vvmnet0\x00', &(0x7f0000000240)="00004600000f00", &(0x7f0000000280)='.]keyring\x00', &(0x7f0000000340)="00004600000f00"], &(0x7f0000000140), 0x1000) 03:59:22 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0xb00, [0x305f, 0xa]}, 0x2c) 03:59:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x38000000}, [{}]}, 0x78) 03:59:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x322}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:22 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000480)={{0x6, 0x8001}, {0x1ff, 0xfff}, 0x4, 0x2}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = getpid() wait4(r1, &(0x7f0000000100), 0x1000000, &(0x7f0000000500)) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x1) creat(&(0x7f0000000440)='./bus\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xffffffffffffffdb) fcntl$setstatus(r0, 0x4, 0x4400) perf_event_open(&(0x7f0000000280)={0x5, 0x70, 0x1, 0xfce, 0x0, 0x7fff, 0x0, 0x2, 0x800, 0x9, 0x580, 0x7, 0x0, 0xffffffff, 0x0, 0x1ff, 0x7, 0x7, 0x0, 0x2, 0x6, 0x100000000, 0x40, 0xc3b, 0x100000000, 0x400, 0x0, 0x5, 0x4, 0x3a, 0x8, 0xfffffffffffff284, 0x8, 0x2, 0xf51, 0x1b82, 0x40, 0x3f, 0x0, 0x30000000000000, 0x2, @perf_config_ext={0x3ff, 0x4}, 0x46, 0x0, 0xffffffffffff8000, 0x4, 0x10001, 0x7, 0xe66a}, r1, 0x2, r2, 0xb) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.procs\x00', 0x2, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000000c0)) openat$cgroup_procs(r3, &(0x7f0000000400)='tasks\x00', 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f00000005c0)={0x10005, 0x0, &(0x7f0000fee000/0x11000)=nil}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000180), &(0x7f0000000140)=0x14) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f0000000300)=""/194) fcntl$setstatus(r6, 0x4, 0x6100) sendfile(r6, r5, &(0x7f0000000040), 0x100000001) 03:59:22 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x6000000, [0x305f, 0xa]}, 0x2c) [ 941.928146] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 941.928146] program syz-executor4 not setting count and/or reply_len properly 03:59:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x3}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000000200), 0xc, &(0x7f00000005c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001e0001040000000000000000ac1414000000000000000000000000000000000000000000ac1414aa0000000000000000000000000000000000000000240009000000000000000000000000000000000000000000000000000000d6865d16f5de"], 0x64}}, 0x0) 03:59:22 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x4000000, [0x305f, 0xa]}, 0x2c) 03:59:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x3f00}, [{}]}, 0x78) 03:59:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x2912000000000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001c00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="3e09e600a7f6a2faf9f2cf72aaaa0000"], 0x28}}, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x141000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000280)={0x6, 0x118, 0xfa00, {{0x1, 0xffff, "d96e0ea718a8b16191525b622c2364e4fe41d663b0ac06bf4e9591933d7dd344105d825a0dd4e2c9c9cbde39c13e0745bfc6ef5d321847f3bbd64c6be614284c1c195d473de9b227bb02f3a47bdca672eda50da67c120fd666d86f6ef564acc75bfc0039ea4cc0d26dec64c83676106f61790ba7ee5b53f236525e221dfa958aec828271b3bb32ce0eab86a6d2c3d80f8b30c327ea79384053a5efd3e477af4290a5c675063c386eb2d4b550456083ef5705a13691eaa1d4f875c6b1c97ba9861d9bb005675b428c6af879c7a93f9481b08708bd81334a064461f76626e09c5b8e3d0211ed11411843d0b2ee1ab5c6330ad9de1f553207f3b1ad23f07c7be827", 0x4e, 0x4, 0x0, 0x9, 0x4, 0x334, 0x5, 0x1}, r4}}, 0x120) 03:59:22 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x500000000000000, [0x305f, 0xa]}, 0x2c) [ 942.254744] netlink: 12 bytes leftover after parsing attributes in process `syz-executor3'. 03:59:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0xffffff7f00000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 942.320133] netlink: 12 bytes leftover after parsing attributes in process `syz-executor3'. 03:59:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x48}, [{}]}, 0x78) 03:59:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x100000000000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:23 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0000030423010000000000007f000000dc0200005500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff81000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000042440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004adb59ef8da6ff39e853aed7ff02231ee301dbf54af7c3b1361ea1820f5c2ee72c578fc8241f97830eec2825ca1b27f4361a719da36851debd7137cfdb4d37d0448d121bf3ccbdedcbb68a6944e89fc48286044730813d7e84dce5c9c7d4a1964a9077d8a8b8f42d2833232db08e8d89521bb762432da750cee4ebe9439d07dd115da24457c69a3dc1"], 0x220) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x40000000003, 0xf0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0x0, r1, 0x0, 0x11, &(0x7f00000003c0)='ppp0+/keyringem1\x00'}, 0x30) fcntl$lock(r0, 0x7, &(0x7f0000000440)={0x0, 0x1, 0xbe, 0x8, r3}) socket$kcm(0x29, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x4, @remote, 0x9}, 0x1c) write$binfmt_script(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xfdef) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000100)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @local}}, 0x35, 0xffffffffffffffff}, &(0x7f0000000280)=0x90) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000002c0)={r5, @in={{0x2, 0x4e21, @broadcast}}, 0x7ff, 0xf}, &(0x7f0000000380)=0x90) 03:59:23 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x1200000000000000, [0x305f, 0xa]}, 0x2c) 03:59:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0xf00000000000000}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x4c00000000000000}, [{}]}, 0x78) 03:59:23 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000480)={{0x6, 0x8001}, {0x1ff, 0xfff}, 0x4, 0x2}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = getpid() wait4(r1, &(0x7f0000000100), 0x1000000, &(0x7f0000000500)) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x1) creat(&(0x7f0000000440)='./bus\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xffffffffffffffdb) fcntl$setstatus(r0, 0x4, 0x4400) perf_event_open(&(0x7f0000000280)={0x5, 0x70, 0x1, 0xfce, 0x0, 0x7fff, 0x0, 0x2, 0x800, 0x9, 0x580, 0x7, 0x0, 0xffffffff, 0x0, 0x1ff, 0x7, 0x7, 0x0, 0x2, 0x6, 0x100000000, 0x40, 0xc3b, 0x100000000, 0x400, 0x0, 0x5, 0x4, 0x3a, 0x8, 0xfffffffffffff284, 0x8, 0x2, 0xf51, 0x1b82, 0x40, 0x3f, 0x0, 0x30000000000000, 0x2, @perf_config_ext={0x3ff, 0x4}, 0x46, 0x0, 0xffffffffffff8000, 0x4, 0x10001, 0x7, 0xe66a}, r1, 0x2, r2, 0xb) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.procs\x00', 0x2, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000000c0)) openat$cgroup_procs(r3, &(0x7f0000000400)='tasks\x00', 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f00000005c0)={0x10005, 0x0, &(0x7f0000fee000/0x11000)=nil}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000180), &(0x7f0000000140)=0x14) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f0000000300)=""/194) fcntl$setstatus(r6, 0x4, 0x6100) sendfile(r6, r5, &(0x7f0000000040), 0x100000001) 03:59:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x40030000000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x4800000000000000}, [{}]}, 0x78) 03:59:23 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x1000000, [0x305f, 0xa]}, 0x2c) 03:59:23 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0xc000000, [0x305f, 0xa]}, 0x2c) 03:59:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x400300}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0xa0000000}, [{}]}, 0x78) 03:59:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000040)) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/176, 0xb0}, {&(0x7f0000000140)=""/108, 0x6c}], 0x2) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_smack_entry(r0, &(0x7f0000000280)='security.SMACK64MMAP\x00', &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x17, 0x3) setsockopt$inet6_dccp_int(r0, 0x21, 0x1, &(0x7f0000000300)=0x4, 0x4) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000340)={0x5, 0x1, [{0x6}, {0x8001, 0x0, 0x9}, {0xfffffffffffffeff, 0x0, 0x1000}, {0x7ff, 0x0, 0x1}, {0x8, 0x0, 0x5}]}) clock_gettime(0x6, &(0x7f00000003c0)) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000400)=0x54, 0x4) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000440)=0x9) getsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000480), &(0x7f00000004c0)=0x4) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000540)={0xf000, &(0x7f0000000500), 0x8, r0, 0x3}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@security={'security\x00', 0xe, 0x4, 0x450, 0x230, 0x230, 0x0, 0x230, 0x230, 0x380, 0x380, 0x380, 0x380, 0x380, 0x4, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0xf8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7, 0x1, 0x5ab}}}, {{@ipv6={@loopback, @local, [0xffffffff, 0xffffff00, 0xffffff00], [0xffffff00, 0xff, 0xffffffff, 0xff000000], 'bond_slave_0\x00', 'gretap0\x00', {}, {0xff}, 0x6c, 0x200, 0x3, 0x26}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x0, 0x0, 0x0, [0x5, 0xfffffffffffffff7, 0x2, 0x80000000, 0xfff, 0x8, 0xffffffffffffff81, 0x40, 0xffffffffffffffcc, 0x4, 0x7fffffff, 0x7fffffff, 0x5, 0x8, 0xc6, 0x48f], 0x7}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x1}}}, {{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@common=@mh={0x28, 'mh\x00', 0x0, {0x6, 0x6, 0x1}}, @common=@ah={0x30, 'ah\x00', 0x0, {0x4d4, 0x4d3, 0x393, 0x7fffffff, 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x200000000000, 0x9, 0x401}, {0x8, 0x1, 0x18000000000000}, 0x839d, 0x9}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000a80)='/dev/snd/pcmC#D#c\x00', 0xc, 0x0) ioctl$TIOCEXCL(r3, 0x540c) r4 = open(&(0x7f0000000ac0)='./file0\x00', 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$RTC_AIE_OFF(r3, 0x7002) syz_open_dev$adsp(&(0x7f0000000b00)='/dev/adsp#\x00', 0x5, 0x109040) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setgid(r1) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000b40)=0x2) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000b80)={0xffff, 0x4d1, 0x1, 0x6, 0x4, [{0x2, 0x8000, 0x4}, {0x7ff, 0xffffffff, 0x20, 0x0, 0x0, 0x80}, {0x5, 0x800, 0x6, 0x0, 0x0, 0x1000}, {0x7b, 0x4, 0x7, 0x0, 0x0, 0x2}]}) r6 = shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_STAT(r6, 0xd, &(0x7f0000000c80)=""/4096) r7 = gettid() ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000001c80)=r7) openat$md(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/md0\x00', 0x402, 0x0) 03:59:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x2912}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:24 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x8000000000000000}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:24 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0xe00, [0x305f, 0xa]}, 0x2c) 03:59:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8f674e332e09789ffe11afc90e6dd7aa12332dee416cf6910610b97e05d1faf7ad190a8da2b35d99eb3ab5c07e1c9a599eb91427b0c4b51e2ae1729fae555f4be50427f4a69373a3a11d62acce7ca43542801b1c3ea70126db208c4a8fe328c771110a7871fd3355cb04a9c0f2a5601e53e12b74224f5cb8212adaeaaa40f42d8617b6f29f426c96b8716a0bc97e51ec342795559892a48e2ac69fdb365a9ece2228f3ae923e1cf4d1f78372be388e8e111b87586ee7d2c51bf005e4d22d2765dec1413cdb35da59e59f452c871da9c21ce7e695a02dff"], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000080)={0xfd, 0x0, [0x401, 0x7, 0x2, 0x3]}) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCXONC(r0, 0x540a, 0xdf6d) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000140)={0x7f}) 03:59:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0xffffff7f}, [{}]}, 0x78) 03:59:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0xf}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:24 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000480)={{0x6, 0x8001}, {0x1ff, 0xfff}, 0x4, 0x2}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = getpid() wait4(r1, &(0x7f0000000100), 0x1000000, &(0x7f0000000500)) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x1) creat(&(0x7f0000000440)='./bus\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xffffffffffffffdb) fcntl$setstatus(r0, 0x4, 0x4400) perf_event_open(&(0x7f0000000280)={0x5, 0x70, 0x1, 0xfce, 0x0, 0x7fff, 0x0, 0x2, 0x800, 0x9, 0x580, 0x7, 0x0, 0xffffffff, 0x0, 0x1ff, 0x7, 0x7, 0x0, 0x2, 0x6, 0x100000000, 0x40, 0xc3b, 0x100000000, 0x400, 0x0, 0x5, 0x4, 0x3a, 0x8, 0xfffffffffffff284, 0x8, 0x2, 0xf51, 0x1b82, 0x40, 0x3f, 0x0, 0x30000000000000, 0x2, @perf_config_ext={0x3ff, 0x4}, 0x46, 0x0, 0xffffffffffff8000, 0x4, 0x10001, 0x7, 0xe66a}, r1, 0x2, r2, 0xb) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.procs\x00', 0x2, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000000c0)) openat$cgroup_procs(r3, &(0x7f0000000400)='tasks\x00', 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f00000005c0)={0x10005, 0x0, &(0x7f0000fee000/0x11000)=nil}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000180), &(0x7f0000000140)=0x14) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f0000000300)=""/194) fcntl$setstatus(r6, 0x4, 0x6100) sendfile(r6, r5, &(0x7f0000000040), 0x100000001) [ 943.632715] syz-executor0 (15247) used greatest stack depth: 11256 bytes left 03:59:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x300}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:24 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x7, [0x305f, 0xa]}, 0x2c) 03:59:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000008000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff016124b7b7060000ffffffff2d6405000000000065040400010000000404000001000000b7030000000000006a0a00fe00000000850000001f000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x200000, 0x161) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0xe, 0xd7, &(0x7f0000000080)="3c08003f00f08b41637c2fee86dd", &(0x7f0000000380)=""/215, 0x101}, 0x28) 03:59:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x7a00}, [{}]}, 0x78) 03:59:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0xfffffffc}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:24 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x100000000000000, [0x305f, 0xa]}, 0x2c) 03:59:25 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x3f000000}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:25 executing program 3: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) accept4(r0, &(0x7f0000000040)=@hci, &(0x7f00000000c0)=0x80, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x10, 0x100000}, 0xffffffffffffff6c) 03:59:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6}, [{}]}, 0x78) 03:59:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x9effffff}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:25 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x8, [0x305f, 0xa]}, 0x2c) 03:59:25 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x440000, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x8, 0x200140) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_sys\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rfkill\x00', 0x24201, 0x0) syz_open_dev$dmmidi(&(0x7f0000000380)='/dev/dmmidi#\x00', 0xb9, 0x80) pipe(&(0x7f00000003c0)) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000016c0)={0x0, 0x0, @pic={0x0, 0x40bd, 0x34f, 0x1, 0x9, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x81, 0x8001, 0x20, 0x8, 0x5}}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000180)="0f00db670f01df66b8000000000f23d80f21f86635400000f00f23f80f09b800008ee00f009a00000f212b0f01c30f21b00f1af9", 0x34}], 0x1, 0x5d, &(0x7f0000000080), 0x0) mlockall(0x1) mlockall(0x6) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001600)={0x11, 0x0, 0x0, 0x1, 0x6, 0x6, @dev={[], 0x11}}, 0x14) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x2) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x12000) r4 = openat(r2, &(0x7f0000000100)='./file0\x00', 0x200, 0x1d1) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000140)=0x401, 0x4) 03:59:25 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x3000000, [0x305f, 0xa]}, 0x2c) [ 944.625296] sg_write: 15 callbacks suppressed [ 944.625360] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 944.625360] program syz-executor4 not setting count and/or reply_len properly 03:59:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0xff, 0xfffffffffffffffe) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000100), 0x0, 0x4000008, 0x1000, 0x87, 0x3, 0x1, {0x101, 0x2, 0x6, 0x7, 0xfffffffffffffffd, 0x4, 0xffffffffffffffc0, 0x3, 0x4, 0xd, 0x8001, 0x100000001, 0x9d, 0x4, "bd431859b74bc34635ce9c49e29e2019581fda8c002c8576b66833270c7d4ef9"}}) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000040)=0x4, 0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000000000e9fffffe01000000000000000000000000000105e0c0facf1f6830838713f1c8948da4aa99617c954f5fe2697ce00000010000000000000000000a0000000000000000000000000000000000003f9f66b88dd69c9dcf549a61d7db790c2ec3f7e9fbe05cc35bee80cf55f7f5c111bfca1d74b7645cce0b438daa36217cdccfa92a4f74bcd86798af6368c791fc86a9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000"], 0xb8}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000240)=0xc) r5 = getuid() r6 = getuid() lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f00000004c0)=[0xee00, 0xffffffffffffffff, 0xffffffffffffffff]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r1, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x2, r4}, {0x2, 0x1, r5}, {0x2, 0x1, r6}], {0x4, 0x4}, [{0x8, 0x7, r7}, {0x8, 0x6, r8}, {0x8, 0x3, r9}], {0x10, 0x7}, {0x20, 0x2}}, 0x54, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x39, &(0x7f0000000080)={@ipv4={[0x0, 0x0, 0x4], [], @multicast1}}, 0x8) 03:59:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x60000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:25 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x300, [0x305f, 0xa]}, 0x2c) [ 944.763023] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 944.763023] program syz-executor4 not setting count and/or reply_len properly 03:59:25 executing program 3: get_mempolicy(&(0x7f00000005c0), &(0x7f0000000640), 0x8, &(0x7f0000ffd000/0x1000)=nil, 0x4) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) connect$inet(r2, &(0x7f0000000180)={0x2, 0x8000000000004e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) recvmsg(r2, &(0x7f0000001600)={&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000001540), 0x0, &(0x7f0000001580)=""/91, 0x5b}, 0x0) socket$inet(0x2, 0x5, 0x969) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x10000, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffff9c, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000100)={0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0x30, 0x1, @in={0x2, 0x4e20, @broadcast}}}, 0xa0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f00000002c0)={0xa5, 0x1, 0x400, 0x1, 0x0}, &(0x7f0000000300)=0x10) getsockname$packet(r3, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000580)=0x14) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000340)={r6, 0x1}, &(0x7f0000000380)=0x8) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0), r5}}, 0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000600)={r6, 0x871c, 0x30}, &(0x7f0000000680)=0xc) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f00000003c0), &(0x7f0000000400)=0x4) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pppoe={0x18, 0x0, {0x0, @remote, 'ip6gre0\x00'}}, 0x326, &(0x7f0000003b80), 0x0, &(0x7f0000003bc0)}}], 0x22b, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}], 0x40) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000440)={'HL\x00'}, &(0x7f0000000480)=0x1e) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9) 03:59:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x1229}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:26 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x100000}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6c00000000000000}, [{}]}, 0x78) 03:59:26 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0xb, [0x305f, 0xa]}, 0x2c) 03:59:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x60}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) mprotect(&(0x7f0000063000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000100)) 03:59:26 executing program 0: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000480)='./file0\x00', 0x141042, 0xfffffffffffffffe) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f00000002c0)={{0x2, 0x8}, {0xead, 0x5}, 0x2, 0x0, 0x3072}) write$UHID_INPUT(r1, &(0x7f0000000980)={0x8, "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", 0x1000}, 0x1006) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000380)=0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000140), 0xd0, 0x0, &(0x7f0000000280)={0x0, 0x989680}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000200)={{0x77359400}, {r3, r4+10000000}}, &(0x7f0000000340)) perf_event_open(&(0x7f0000000a40)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 03:59:26 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0xc, [0x305f, 0xa]}, 0x2c) [ 945.487565] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 945.487565] program syz-executor4 not setting count and/or reply_len properly 03:59:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0xfffff000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:26 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0xd000000, [0x305f, 0xa]}, 0x2c) 03:59:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0xf0ffffffffffff}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 945.696534] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 945.696534] program syz-executor4 not setting count and/or reply_len properly [ 945.755665] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 945.769306] FAT-fs (loop0): Filesystem has been set read-only [ 945.792891] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000020) 03:59:26 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000140)={0x0, 0x2710}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) r1 = getpgid(0xffffffffffffffff) capset(&(0x7f0000000040)={0x39980732, r1}, &(0x7f0000000100)={0x7, 0x9, 0x9, 0x0, 0x7, 0x8}) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000074) 03:59:26 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x9000000, [0x305f, 0xa]}, 0x2c) [ 945.828612] audit: type=1804 audit(1539748766.420:332): pid=15405 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir693306501/syzkaller.pzPHfj/1209/file0/file0" dev="loop0" ino=129 res=1 03:59:26 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x3f00}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x80000000000000}, [{}]}, 0x78) 03:59:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0xfcffffff00000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:26 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup3(r1, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000600)={0x13, 0x10, 0xfa00, {&(0x7f0000000400), r4}}, 0xfdef) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00'}, &(0x7f0000000040)=0x44) 03:59:26 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0xe, [0x305f, 0xa]}, 0x2c) 03:59:26 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mixer\x00', 0x440000, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000000010000000000000d400000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000081ec650000000010010000000000cc12f7b6a9f0b0d52c06d606c81e3007de65eae0c8e884d7878b648d39aa3900098cdca2aec046969087a97fb7e274e1c2076d7432e8daa483b4a3ddbd97303137254d76791a3ac62cf5ce09c032326b11a2", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000100000000000000e600000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000030000000000000ba00000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000000000000000a800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0xc0105303, &(0x7f0000000c00)={{}, {0x80}}) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000000)={0x1, 0x9, 0x1}) 03:59:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000380)="153f6234488dd25d766070") syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x6, 0x31, 0xffffffffffffffff, 0x0) [ 946.367049] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 946.367049] program syz-executor4 not setting count and/or reply_len properly 03:59:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x6000000000000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:27 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0xffffffff00000000, [0x305f, 0xa]}, 0x2c) 03:59:27 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000200)=""/4096) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(&(0x7f0000001240)=ANY=[@ANYBLOB="2f5765762f6e6264300094887eb1ef6c87fa1d14a3ed1b6e357e7be4332515ee49d5ffe17ff316da2804b0a631c6d83ec9c47be7d4ed9b8ddb60a1b4a22fea4d5294a9e66269c24e9c99fda409c8105d84d2dc2c6079860f9ba7cb0cbeebba3cb085151d3fe052f1ab67785703b6187f97ad5044486779f7d8041141f956e76859e04f13d62d78f1f92031fd2ed4a1c18b7f402b20f9aa362d09ec7eddd7885777aa2dbbb58245286535ee30bab4ed6fbdb49ec19e0535c29bd9186cfbf7a035bc416f3d373ff03755dedbf22bbc930c4c5aaa6231bc027ecfc9f54c25cbedd6afe939501c009b00000000"], &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='efivarfs\x00', 0x281401, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@remote, 0xff, 0x3, 0x0, 0x2, 0x7, 0x2, 0x81}, &(0x7f0000001200)=0x20) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x81, {0x7ff, 0x2, 0x7, 0x97dd, 0x8, 0x100000000}, 0xffffffff, 0x3f}, 0xe) [ 946.475844] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 946.475844] program syz-executor4 not setting count and/or reply_len properly 03:59:27 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/28, 0x4eb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc08c5335, &(0x7f0000000080)={{}, "0f6f727430000000002e0000000000000000000000000000000000000000009cc0a03100"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000140)=0x9) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x2) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r3, 0x1000000000013) 03:59:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x68000000}, [{}]}, 0x78) [ 946.653968] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 946.653968] program syz-executor4 not setting count and/or reply_len properly [ 946.728828] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 946.728828] program syz-executor4 not setting count and/or reply_len properly 03:59:27 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x201ca7fa}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x79520ffb, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0xb2d3, 0xff, 0x200, 0x2, 0x0, 0x4, 0x7, 0x3, r1}, 0x20) syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f6c6f63636f6f6bf4588049e021ebe77a6f746f3d6c6f636b5f6e6f6c6f636b2c6e6f737569646469722c6c6f636b7461"]) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYRES32=0x0], 0x1) 03:59:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x3000000000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:27 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x14, [0x305f, 0xa]}, 0x2c) 03:59:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) mmap(&(0x7f0000b6e000/0x4000)=nil, 0x4000, 0xd, 0x110, r2, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r1, &(0x7f0000465f8e)=""/114, 0x3e) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x2405, r3) close(r1) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 03:59:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x100000}, [{}]}, 0x78) 03:59:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0xa0008000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 947.240591] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 947.240591] program syz-executor4 not setting count and/or reply_len properly 03:59:27 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x5000000, [0x305f, 0xa]}, 0x2c) 03:59:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x3800}, [{}]}, 0x78) [ 947.400857] gfs2: invalid mount option: noloccookôX€Ià!ëçzoto=lock_nolock [ 947.412649] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 947.412649] program syz-executor4 not setting count and/or reply_len properly [ 947.432195] gfs2: can't parse mount arguments 03:59:28 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x800000000000000, [0x305f, 0xa]}, 0x2c) 03:59:28 executing program 3: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@sha1={0x1, "4570f417b9ac640b47f1fa2c6b8a88658c4a1096"}, 0x15, 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0)='hfsplus\x00', 0x3f00, &(0x7f0000000200)="2f646576bd062f6e756c6c623001bae20811b3cb04f949592fa0f6b6c0f9b4bb1563323248c938472c73e8a6ca2008e3d1fb02d7c59c4cea1a1faf14e3230421a506762c97000000000000000000000000000000") 03:59:28 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x666, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000080)="24f4aba0401e61a2482443ba0481b7c405b9473c650a4a60f68bdebd3f336ef44ea17fc22fbc4a7dca4b8613bbe2e94addbb91107e667dbe8d8dbd0f3b9a1484dd5e46be77691e31e6cc6e078f2d0b433adbc704ed2e892525467ad95c9346c9089eaf3f5e2cb5ae5c30f56800ff885216a81f45ad7366720c9f45ae71d256d683649e3edb8dc813f2177dc6d9a7bca65ca33aa617f9e94defe2f9b358311988", 0xa0) add_key(&(0x7f0000000b00)='logon\x00', &(0x7f0000000b40)={'syz'}, &(0x7f0000000b80)='c', 0x1, 0xffffffffffffffff) 03:59:28 executing program 0: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560284470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="3900000011000b0469001bfd3f03f5000c450001070000001419001a00040023000700f0000200000809c99183a8a500020000000000000000", 0x39}], 0x1) 03:59:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:28 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x40000}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x300}, [{}]}, 0x78) 03:59:28 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x1100000000000000, [0x305f, 0xa]}, 0x2c) 03:59:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x9effffff00000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:28 executing program 3: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x3fd) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[]}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000002c40)={{0xa250, 0xffffffff}, 'port0\x00', 0x40, 0x800, 0x0, 0xd4e, 0x22, 0x76, 0x0, 0x0, 0x0, 0x1}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000), 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{&(0x7f0000000400)=@in={0x2, 0x0, @rand_addr}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000480)=""/184, 0xb8}, {&(0x7f0000000540)=""/166, 0xa6}, {&(0x7f0000000600)=""/164, 0xa4}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000780)=""/143, 0x8f}, {&(0x7f00000002c0)=""/2, 0x2}], 0x6, &(0x7f00000008c0)=""/93, 0x5d, 0x2}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000b80)=""/202, 0xca}, {&(0x7f0000000c80)=""/98, 0x62}], 0x2, &(0x7f0000000d40)=""/125, 0x7d, 0x6fe}}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000e40)=""/85, 0x55}], 0x1, &(0x7f0000000f00)=""/234, 0xea, 0x4}, 0x4}, {{&(0x7f0000001000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001080)=""/223, 0xdf}, {&(0x7f0000001180)=""/62, 0x3e}, {&(0x7f00000011c0)=""/113, 0x71}, {&(0x7f0000001240)=""/115, 0x73}, {&(0x7f00000012c0)=""/1, 0x1}, {&(0x7f0000001300)=""/180, 0xb4}, {&(0x7f00000013c0)=""/122, 0x7a}], 0x7, &(0x7f00000014c0)=""/42, 0x2a, 0x6}, 0x7}, {{&(0x7f0000001500)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/187, 0xbb}, {&(0x7f0000001640)=""/204, 0xcc}, {&(0x7f0000001740)=""/53, 0x35}, {&(0x7f0000001780)=""/226, 0xe2}, {&(0x7f0000001880)=""/4096, 0x1000}], 0x5, &(0x7f0000002900)=""/253, 0xfd, 0x5}, 0x1}], 0x5, 0x0, &(0x7f0000002b80)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='rdma.current\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111}}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'teql0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8923, &(0x7f0000000380)={"62707130000b00fe0000000000faff00", r4}) r5 = fcntl$getown(r3, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0x50, &(0x7f0000000200)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000940)={r5, r0, 0x0, 0x5, &(0x7f00000001c0)='ppp1\x00', r6}, 0x30) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'bpq0\x00', 0x1212}) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) unshare(0x40000000) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x0, 0x0) openat$cgroup(r7, &(0x7f0000002bc0)='syz1\x00', 0x200002, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000980)='tls\x00', 0x4) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f00000000c0), 0x4) pipe2(&(0x7f0000000140), 0x0) clock_gettime(0x0, &(0x7f0000000080)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0305710, &(0x7f0000000040)={0x0, 0x6, 0x7ff, 0x5}) getpgid(0xffffffffffffffff) [ 948.153620] netlink: 25 bytes leftover after parsing attributes in process `syz-executor0'. 03:59:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6c}, [{}]}, 0x78) 03:59:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000580)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) pselect6(0x40, &(0x7f0000000300)={0x0, 0x7, 0x5, 0x1ff, 0x4, 0x8, 0x3, 0xffffffffffff780b}, &(0x7f0000000340)={0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x7f, 0x0, 0x0, 0x100000001}, &(0x7f0000000380)={0x9, 0x0, 0x81, 0x6, 0x0, 0x0, 0x3f, 0x1f}, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f0000000440)={&(0x7f0000000400), 0x8}) msgget(0x1, 0x0) stat(&(0x7f0000000180)='./bus\x00', &(0x7f0000000480)) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000540)=0xfffffffffffffffc, 0x3) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) getpgid(0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, "636c69656e000000000000040002000000000000000000000000000000000000000000000800", 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(0xffffffffffffffff, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x30) 03:59:28 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x3f00000000000000, [0x305f, 0xa]}, 0x2c) 03:59:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x29120000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x2000000000000000}, [{}]}, 0x78) [ 948.400025] IPVS: ftp: loaded support on port[0] = 21 03:59:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0xffffff7f}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000580)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) pselect6(0x40, &(0x7f0000000300)={0x0, 0x7, 0x5, 0x1ff, 0x4, 0x8, 0x3, 0xffffffffffff780b}, &(0x7f0000000340)={0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x7f, 0x0, 0x0, 0x100000001}, &(0x7f0000000380)={0x9, 0x0, 0x81, 0x6, 0x0, 0x0, 0x3f, 0x1f}, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f0000000440)={&(0x7f0000000400), 0x8}) msgget(0x1, 0x0) stat(&(0x7f0000000180)='./bus\x00', &(0x7f0000000480)) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000540)=0xfffffffffffffffc, 0x3) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) getpgid(0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, "636c69656e000000000000040002000000000000000000000000000000000000000000000800", 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(0xffffffffffffffff, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x30) [ 948.730530] IPVS: ftp: loaded support on port[0] = 21 03:59:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0xf000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x7400000000000000}, [{}]}, 0x78) 03:59:29 executing program 0: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000180)) 03:59:29 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x14000000, [0x305f, 0xa]}, 0x2c) 03:59:29 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0xfaa71c2000000000}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000080)={[], 0x0, 0x241}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x1, 0x0, @pic={0x0, 0xffffffffffffbb3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}}) 03:59:29 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x8000a0, [0x305f, 0xa]}, 0x2c) 03:59:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x30000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x800000}, [{}]}, 0x78) 03:59:29 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000080)={&(0x7f0000006240)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8}]]}}}]}, 0x3c}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)="02fab2ec1006846883502290a85f8299d9432bbb50ef037a7d884e2ea1e085346e8ee87170f24a844efebcb808a2e400c02def60f8", 0x35}, {&(0x7f0000000380)="1df29d381a7d9254fafdbcdcabeb4a9c3b8f78853658cfacae67851e8b5f3ab1f4b4d25323cc78e5ffd90acb415ce4c09523154b24d4871f3f14f2b9bb2ae55251a9b6b7414c33817113ec1a445bcafdf2b98f6679ae5fb1693ad6d310775c33345176aa458d41836ca974ce35bbc551368d880c82e05bf3d87250e8a5c1638296048b4077304c843b453b1c117637c04324b81cb67e607356186ae6e63fb4983f2726d9c821f941610e0c8d179c96840b083bf483c4d26f620df82ba893f754dddc22867bdf1ee77331b3c2cf49fca890008d7e01eb809f1a2a599cf48e7c5bd8cabcd4", 0xe4}, {&(0x7f0000000480)="239231e272e2c431467404f4561ef9e6ad0b004da9d20827b629cb78186330c075f01cd3b1b3b5a6954ee96ed1bf572c5265c21917c0d250391b8313934dccaf5b1363fd2de6a0d1789f2ccad41b180898d822a87c5396ef98ff84df311c69b2cbc4c251e8ac21e15b31fc3575395aad1bb96f5f91a7692c3a449123792d972fbbf34dea6e09d43d87e1632fc849cef9d3c4304d2174972533b82481672ba020e7937b855b894b9fa6c641a692c487cf089bd225f8a834db283cb786e9b58d40dea3cd85", 0xc4}, {&(0x7f0000000040)="7a1c", 0x2}, {&(0x7f0000000580)="ba67f35d892daf79387bb9c3400fce3cdbd1593758387717af439dc32ed35fbcfab1185a8ce2fe67102c5ebdaffaa3ce514a3ce9d775d7a59799d41f4e2de34cb4e117c7c1a4d80930b87247608a19446e6f5a985cc9f94bb9cf3ee74f1dfab47dfd75e4281677986940fd13b16cf4f69de78d8c2e4c18ae291d443ad3893e14bbf3cf65889e3e1f4e1de9", 0x8b}, {&(0x7f00000000c0)="ed", 0x1}, {&(0x7f0000000640)="a04d7626c094186e9e1b3e96bb3ce7d3006973f8b4234a70b005fe4dce3450f3ccaea819754b0a7cf10567cabc175ad1fc43dd22796c76ce4485313bb4b65395c1b3f8adcffc8e7e5858bb56ce6fa63bb3bf60fc863441856f9ef0507cf8e8dff808401c88ed69547231cde1cc1d0098143faa1879a1951df936af6e37a4d147a976ca32a17eaef4400af9cd98dbbebb2d4c10ca8960bc70a6205a335ea0342afd9d96d21d1b7987641e00d3b2c084cfaaaf3ff0df", 0xb5}, {&(0x7f0000000900)="4e6d5e7653bd15d6da5828cfb06521cc4ff65269c60dc73341cafa6ac124f44cc692c52b3f802f5d1c5c575aca3967b23ca5a3b1fa73f888682da659a6b4a3b899a0129d46120e3db8f3f8ba81b101134e2f8f52f54378659b4d587674696620965545090ed4a01793755a8fcb65d6ff164553e8bc9ff3a71f1e146a338c0cddcc2b21ebdd5064268057574120a65216a0bd245e0688d16c9d5a8b1b564c4f256df0573f35ff8c0fed7e84224e6fe16266cacfed86f232428c14c1b07b1994d381ad755e05464a97c7d032f803e8ab695a8117129e00ed", 0xd7}], 0x8, &(0x7f0000000200)}], 0x1, 0x0) 03:59:29 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0xd00, [0x305f, 0xa]}, 0x2c) 03:59:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:29 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x11, [0x305f, 0xa]}, 0x2c) 03:59:29 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x212000, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000400)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) 03:59:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x3f000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x500}, [{}]}, 0x78) 03:59:30 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x300000000000000, [0x305f, 0xa]}, 0x2c) 03:59:30 executing program 0: r0 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000280)) fcntl$setpipe(r0, 0x407, 0xfff) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85b, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) unlink(&(0x7f0000000140)='.\x00') r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x282880, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000480)=0x0) getpgid(r3) mount(&(0x7f0000000080)=ANY=[], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='sysfs\x00', 0x0, &(0x7f0000000740)) mount(&(0x7f0000000000)=@md0='/dev/md0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='mqueue\x00', 0x10c000, 0x0) mount(&(0x7f0000000140), &(0x7f0000000380)='./file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000180)) mount(&(0x7f0000000080)=@sg0='/dev/sg0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='bdev\x00', 0x44000, &(0x7f0000000200)='\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./bus\x00') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000440)={@ipv4={[], [], @local}}, &(0x7f0000001380)=0xffffffffffffff2a) readv(r4, &(0x7f00000013c0)=[{&(0x7f0000001200)=""/245, 0xf5}], 0x1) io_setup(0x8, &(0x7f0000001700)) ioctl$KVM_ASSIGN_PCI_DEVICE(r4, 0x8040ae69, &(0x7f0000000080)={0x0, 0x6, 0x99d3, 0x0, 0x7fffffff}) 03:59:30 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) io_submit(0x0, 0x0, &(0x7f0000000780)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x200000, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x3, 0x1, &(0x7f00000003c0), 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x4f0d000000000000, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x4000000001000000, 0x0, 0x0, 0x0, 0x6]}}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000240)) ioctl$VT_DISALLOCATE(r1, 0x5608) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000440)) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54", 0xe) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0x400000, 0x0) fcntl$getown(r0, 0x9) getpgid(0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002ac0)={{{@in=@remote, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f00000003c0)=0xe8) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000005e40)={0xffffffffffffffff, r3, 0x0, 0xa, &(0x7f0000005e00)='/dev/vhci\x00'}, 0x30) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000007680)) stat(&(0x7f00000076c0)='./file0\x00', &(0x7f0000007700)) getegid() sendmsg$netlink(r3, &(0x7f0000007840)={&(0x7f0000000280)=@kern={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000007600)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="100000001a00000129bd8f8f7000fddbdf25df206a9a03718171679100f56524e7393247b8a83e56c1da66c66feba0477f4cbd34713fa27efe3e4e77d7e8cdf6eafaf425057a97d0c3b169745aafbaa99663b2d3fef81751c22d38a408e5723fbd8cd2158cd12834"], 0x10}], 0x1, &(0x7f0000007780), 0x0, 0x4000001}, 0x4000000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r4 = accept$alg(r0, 0x0, 0x0) io_setup(0x2, &(0x7f0000479000)=0x0) io_submit(r5, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x3, 0x0, r4, &(0x7f0000000140)="c4427aa1afb6c4394b7f24a10591dd4391", 0x11, 0x2a}]) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000100)={r7, 0x112}, 0xc) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)) 03:59:30 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0xeffdffff}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) [ 949.965851] sg_write: 12 callbacks suppressed [ 949.965902] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 949.965902] program syz-executor4 not setting count and/or reply_len properly 03:59:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0xffffffffa0008000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x4}, [{}]}, 0x78) [ 950.112599] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 950.112599] program syz-executor4 not setting count and/or reply_len properly 03:59:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x8000000018000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"0000000000000000000000000200", 0x20000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000340)={@void, @val={0x1, 0x0, 0xffffffffa0008000}, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x18, 0x0, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}, 0xff23) 03:59:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0xfffffff0}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:30 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x12000000, [0x305f, 0xa]}, 0x2c) [ 950.226350] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 950.226350] program syz-executor4 not setting count and/or reply_len properly [ 950.313439] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 950.313439] program syz-executor4 not setting count and/or reply_len properly [ 950.348679] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.355205] bridge0: port 2(bridge_slave_1) entered forwarding state 03:59:30 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="f95f874fb17b96eb0734133051114495828c3a432aa25c281465fae51a42c1dc278df3422f24c7ea9e76242722c766c5fbec20ee1bb88b5d78d3b3b2097abf9d2ce2928eabaa4cb67103fe8bec1d06ce85dc73647c0e297c95645e3c860e33fa8b763b1bc890afe28b8956052f9f55f406839396a91d0e0f8b724718318ae9bb67f94ebe", 0x84}], 0x1}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x10000, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r2}, 0x10) recvmmsg(r1, &(0x7f0000000280)=[{{&(0x7f0000000340)=@ipx, 0x80, &(0x7f00000000c0), 0x0, &(0x7f00000003c0)=""/154, 0x77}}], 0xfffffffffffffd0c, 0x0, 0x0) [ 950.362307] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.368701] bridge0: port 1(bridge_slave_0) entered forwarding state 03:59:31 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x10000000, [0x305f, 0xa]}, 0x2c) [ 950.410559] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 950.419556] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 950.426823] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:59:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x7}, [{}]}, 0x78) [ 950.497989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 950.514610] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:59:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x200000000000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:31 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8000, 0x0) pwritev(r0, &(0x7f0000000540)=[{&(0x7f00000001c0)="f0db9a0ccb9af5df5f4ce061cd9698dcebaf9a823bd682b1ea6b672a401591092542b4ec8c0ee76d997800a4ab853e9293d32a18e6faba5f07554970f6260f9057081f5951cdb7d88303b1f79c5c0210a3ed39e18cc9df0333ff46aa3157946d770183f99babc4774223988e21f7215e668af160ca211a14700d6c438c0ae55551ec620fa20b6520538ba5a829ab934301093c8e52ad73ada3ea1fde0a8d54dfbbc56418ad4d5d53526b3372fb3a3e8ff2080a6a70c69ed3cfb5645f", 0xfffffe36}, {&(0x7f0000000280)="1680de5c10b3a192cbe5641b4816ce7e44066f26a29a6c0eb2fb11274957ba5830ee28ea6bff11f4561702f49d5620fb3f8d4c1b9ef0ead4bb5f1a0b2dd171a7498d28f1f3648809d9f0", 0x4a}, {&(0x7f0000000300)="80f8c71429ecd23a4287dc641d968cd198227573cf166c2e8f88302c131b2869a910de86564a0ea1c33cf820beb6799c87e1f85c40c9ea31f73ee96f358152ae3315ed0ad1f678bc5e950337e43db26fe0", 0x51}, {&(0x7f0000000380)="293caf2e3a0d12c0241fe7ad184f3f2306c6af297a8fa52d9da585df9ffd413cc783cad7aa526d8bde03ee54f63f67b87cfe210b667ce9f857d0070b9193988aa310551aca74f559d7b893f8c18898cd68974d6cef09204b6d65a9f76e45b27fab53", 0x62}, {&(0x7f0000000400)="f33216f47695a17fbafd6db41498938838674111ebd823ac6f8235ecebdc71ac9fc15c38dd77abd45f796da5f677b3f77537001103ee93341b06455e3d8131b7ae9c4a3f6c664b106f9a81ef855cfbd8df29268dbfac4eccb3bd3de3e337e568a470175eedfc4d0997136e899a54f2a3a5741228063b1b5bfc1f4dca6ce381cb51e05da9a65f84", 0x87}], 0x5, 0x0) r1 = getpgrp(0x0) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x5}, r1, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x7) r3 = syz_open_dev$mouse(&(0x7f0000000840)='/dev/input/mouse#\x00', 0x3, 0x208040) ioctl$DRM_IOCTL_ADD_BUFS(r3, 0xc0206416, &(0x7f0000000880)={0xeec8, 0x2, 0x6, 0x5, 0x1, 0x1}) r4 = semget(0x1, 0x3, 0x20) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000800)=[0x4, 0x5, 0x0]) r5 = epoll_create1(0x0) epoll_wait(r5, &(0x7f0000000040)=[{}], 0x1, 0x8001) epoll_wait(r5, &(0x7f00000000c0)=[{}], 0x1, 0x5bb6) read(r2, &(0x7f0000000140)=""/117, 0x75) socketpair(0x3, 0x2, 0x1ff, &(0x7f0000000100)={0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000004c0)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f00000007c0)={0x13, 0x10, 0xfa00, {&(0x7f00000005c0), r7}}, 0x18) 03:59:31 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="f95f874fb17b96eb0734133051114495828c3a432aa25c281465fae51a42c1dc278df3422f24c7ea9e76242722c766c5fbec20ee1bb88b5d78d3b3b2097abf9d2ce2928eabaa4cb67103fe8bec1d06ce85dc73647c0e297c95645e3c860e33fa8b763b1bc890afe28b8956052f9f55f406839396a91d0e0f8b724718318ae9bb67f94ebe", 0x84}], 0x1}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x10000, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r2}, 0x10) recvmmsg(r1, &(0x7f0000000280)=[{{&(0x7f0000000340)=@ipx, 0x80, &(0x7f00000000c0), 0x0, &(0x7f00000003c0)=""/154, 0x77}}], 0xfffffffffffffd0c, 0x0, 0x0) [ 950.590698] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 950.590698] program syz-executor4 not setting count and/or reply_len properly [ 950.723244] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 950.723244] program syz-executor4 not setting count and/or reply_len properly 03:59:31 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0xf0ffffff}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:31 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0xb000000, [0x305f, 0xa]}, 0x2c) 03:59:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0xf000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:31 executing program 3: prctl$void(0x2a) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x101101, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x470, 0x130, 0x130, 0x130, 0x388, 0x388, 0x388, 0x4, &(0x7f0000000040), {[{{@uncond, 0xf0, 0x130}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "918ef53aba1f3c1167bf916a59a6009d6294c2d15dc43923c056616a36de"}}, {{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x36, 0x3}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x11}, @multicast1, 0xff000000, 0xffffffff, @empty, {[0x0, 0x0, 0x0, 0x937a3063ed212421, 0x0, 0xff]}, @empty, {[0xff, 0xff, 0xff, 0xff]}, 0x9, 0x3, 0x10001, 0x101, 0x1, 0xff, 'bond_slave_1\x00', 'gretap0\x00', {}, {0xff}, 0x0, 0x2}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @rand_addr=0x9, @broadcast, 0xf, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c0) 03:59:31 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0xa00, [0x305f, 0xa]}, 0x2c) 03:59:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x10000000000000}, [{}]}, 0x78) 03:59:31 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x1200, [0x305f, 0xa]}, 0x2c) 03:59:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x6000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:31 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, &(0x7f0000001640)=""/130, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) socket$alg(0x26, 0x5, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)=ANY=[]) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) socket$nl_netfilter(0x10, 0x3, 0xc) [ 950.973112] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 950.973112] program syz-executor4 not setting count and/or reply_len properly 03:59:31 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x3f00, [0x305f, 0xa]}, 0x2c) [ 951.140223] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 951.140223] program syz-executor4 not setting count and/or reply_len properly 03:59:32 executing program 0: mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x102d}, 0xbc68bc6a5833c2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="b4000000000000005d000200a00d4078b5110000000400000000000000000000000000000095000000000000002cca908b39223e900c5c651aa3bfa86343fbcab7a645cb33b892f9109638a37cec4c667ef34e7235e9"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x3e9, &(0x7f000000cf3d)=""/195}, 0x48) r0 = socket$inet6(0xa, 0x6, 0x0) getsockname(r0, &(0x7f0000000000)=@can={0x1d, 0x0}, &(0x7f0000000080)=0x80) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={@empty, 0x15, r1}) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = socket$inet(0x2, 0x80005, 0x0) bind$rds(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$inet_sctp(r2, &(0x7f0000001c80)={&(0x7f00000017c0)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f0000001b80)=[{&(0x7f0000001800)="b4", 0x1}], 0x1, &(0x7f0000001c00)}, 0x0) 03:59:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0xffffff9e}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:32 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0xffffff8d}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x3f000000}, [{}]}, 0x78) 03:59:32 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x6, [0x305f, 0xa]}, 0x2c) 03:59:32 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000140)={@dev}, 0x14) accept(r0, &(0x7f0000000040)=@ethernet={0x0, @link_local}, &(0x7f00000000c0)=0x80) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "b7e720", 0x8, 0x3a, 0x0, @local, @local={0xfe, 0x80, [0x3]}, {[], @icmpv6=@echo_request}}}}}, &(0x7f0000000000)={0x0, 0x20000000000000, [0x0, 0xe16]}) 03:59:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x300000000000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:32 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0xf, [0x305f, 0xa]}, 0x2c) 03:59:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0xfcffffff}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 951.789777] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 951.789777] program syz-executor4 not setting count and/or reply_len properly 03:59:32 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x10000, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000280)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_adjtime(0x0, &(0x7f00000000c0)) 03:59:32 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0xc00000000000000, [0x305f, 0xa]}, 0x2c) [ 951.934490] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 951.934490] program syz-executor4 not setting count and/or reply_len properly 03:59:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20000000}, [{}]}, 0x78) 03:59:33 executing program 0: r0 = socket(0x2, 0x2000000001, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00002a7f9c)={&(0x7f000000d000)=[0x0, 0x6], 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8cfbc89fefc282b0e9b6d1b29d5500b5ff74b06ccbd9dee8c886586975b5446e"}}) getsockopt(r0, 0x8, 0x42, &(0x7f000000d000)=""/8, &(0x7f00000000c0)=0x2fc3) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) 03:59:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0x40030000000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:33 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0xf0ffffff00000000}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x10040, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000180)={0x6, 0x1, {0x0, 0x20, 0x638, {0x3, 0x1ff}, {0x1ba, 0x8}, @rumble={0xffffffffffffff83, 0x7ff}}, {0x51, 0x2d5, 0x0, {0x8, 0xffffffffffffff7f}, {0x2, 0x69}, @rumble={0xffffffffffff4d79, 0xfffffffffffffffd}}}) ioctl(r0, 0x8912, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x88}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 03:59:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x200000000000000}, [{}]}, 0x78) 03:59:33 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x11000000, [0x305f, 0xa]}, 0x2c) 03:59:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") close(r0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000003e40)='/dev/vhci\x00', 0x2001, 0x0) io_setup(0x40, &(0x7f0000000300)=0x0) io_cancel(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)}, &(0x7f0000000100)) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x20000142}]) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0xc18, @empty, 0xd402}], 0x1c) 03:59:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0x300000000000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:33 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x400000000000000, [0x305f, 0xa]}, 0x2c) 03:59:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0x2912000000000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x12, [{}]}]}, 0x24}}, 0x0) 03:59:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0xffffff7f00000000}, [{}]}, 0x78) 03:59:33 executing program 3: r0 = memfd_create(&(0x7f0000000040)="00000600000000000000", 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYPTR64, @ANYBLOB="6c49648a92a7dd6cfd9ac4ce76c6ee0c628a2c670be0bfa1d8bee37733b5", @ANYRES64=r0, @ANYPTR64, @ANYRESHEX], 0x50) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000002c0), 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) 03:59:33 executing program 3: r0 = socket$kcm(0x11, 0x7, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4305, 0xd, @mcast1}, 0x80, &(0x7f0000000700)}, 0x0) 03:59:34 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x10000000000000}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0x200000000000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:34 executing program 0: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000240)="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", 0x119, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000480)={'bpq0\x00', {0x2, 0x4e20, @multicast2}}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r2, r0}}, 0x18) r3 = dup3(r0, r0, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f0000000000)=0xe8) r5 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, &(0x7f0000000080)={0x2c, 0x6, r4, 0x3d, r5}, 0x10) prlimit64(0x0, 0x0, &(0x7f0000000940)={0xfffffff000000000}, &(0x7f0000000980)) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) 03:59:34 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x900000000000000, [0x305f, 0xa]}, 0x2c) 03:59:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x300000000000000}, [{}]}, 0x78) 03:59:34 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x400000000000000, [0x305f, 0xa]}, 0x2c) 03:59:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0xf0ffffffffffff}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x700000000000000}, [{}]}, 0x78) [ 953.704132] ucma_write: process 3985 (syz-executor0) changed security contexts after opening file descriptor, this is not allowed. 03:59:34 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x3, [0x305f, 0xa]}, 0x2c) 03:59:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000005010040000000000000000000000000a82137affda3cf34b2db049deef2664868875f0da8a48439e6b0a95e2668623637bf0212b4448df89b1473d1b14ba54162cce3c5c23798650c11a904295e8488207ad40e6cce2c78fb"]) 03:59:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0xa0008000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:34 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x100020, &(0x7f0000000340)={[{@barrier_val={'barrier'}}]}) [ 954.353742] EXT4-fs (sda1): re-mounted. Opts: barrier=0x0000000000000000,,errors=continue [ 954.404953] EXT4-fs (sda1): re-mounted. Opts: barrier=0x0000000000000000,,errors=continue 03:59:35 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x100000000000000}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:35 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0xe00000000000000, [0x305f, 0xa]}, 0x2c) 03:59:35 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) close(r0) timerfd_create(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000180)="67660f384075800f01d166b8be0000000f23d80f21f86635400000e00f23f8a5440f20c0663502000000440f22c0670f22dd652680e7020fc71d0f01bfb3bf9a0020ae00", 0x44}], 0x1, 0x0, &(0x7f0000000200), 0xb4) 03:59:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x74000000}, [{}]}, 0x78) 03:59:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0xffffffffa0008000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:35 executing program 0: r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getrlimit(0x2, &(0x7f0000000080)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000380)=""/4096) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x4000, @dev={0xac, 0x14, 0x14, 0xffffffff00000000}, [0x0, 0x300000009000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) socket$netlink(0x10, 0x3, 0xc) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="5efc49000000001100"], 0x15, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 03:59:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0x3}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:35 executing program 3: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f000000b000), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000040)={0x0}) clock_settime(0x0, &(0x7f00000000c0)={r1}) r2 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x0, 0x30, 0x4, 0x3}, &(0x7f0000000180)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f00000001c0)={r3, 0x4}, 0x8) accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c, 0x0) 03:59:35 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0xe000000, [0x305f, 0xa]}, 0x2c) 03:59:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x7000000}, [{}]}, 0x78) 03:59:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0x3000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x80000) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x9, 0x60600) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000100)={0x2a, 0xe, 0x7, 0x11, 0x4, 0x0, 0x4, 0x16d, 0xffffffffffffffff}) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/zero\x00', 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000140)="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") ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000001400)=""/27) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000240)=0x9) ptrace$setregs(0x8, r1, 0x0, &(0x7f0000000140)) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000c00)={0x20}, 0x20) sendto$inet6(r3, &(0x7f0000000280)="c7e3199ea1cbdcb155ca00b88809445d8ea193a91aec2f616591280725a5dc77e6c31ff5948318ec9cfb54114eb1b0416595e1c844f1ce1fcff8a277", 0x3c, 0x24000010, &(0x7f00000002c0)={0xa, 0x4e24, 0x7fff, @dev={0xfe, 0x80, [], 0x12}, 0x800000000000000}, 0x1c) [ 955.133575] sg_write: 13 callbacks suppressed [ 955.133590] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 955.133590] program syz-executor4 not setting count and/or reply_len properly 03:59:35 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x1000000}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:35 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x8000000, [0x305f, 0xa]}, 0x2c) 03:59:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0x9effffff}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:35 executing program 0: getpid() clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000100)={0x3, 0x7, 0xa540}) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0xfffffffffffffffb, 0x0, 0x77b, 0x0, 0x0, 0x37c, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc178, 0x0, 0x0, 0x0, 0x0, 0x0, 0x452, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x6) 03:59:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x80000) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x9, 0x60600) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000100)={0x2a, 0xe, 0x7, 0x11, 0x4, 0x0, 0x4, 0x16d, 0xffffffffffffffff}) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/zero\x00', 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000140)="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") ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000001400)=""/27) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000240)=0x9) ptrace$setregs(0x8, r1, 0x0, &(0x7f0000000140)) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000c00)={0x20}, 0x20) sendto$inet6(r3, &(0x7f0000000280)="c7e3199ea1cbdcb155ca00b88809445d8ea193a91aec2f616591280725a5dc77e6c31ff5948318ec9cfb54114eb1b0416595e1c844f1ce1fcff8a277", 0x3c, 0x24000010, &(0x7f00000002c0)={0xa, 0x4e24, 0x7fff, @dev={0xfe, 0x80, [], 0x12}, 0x800000000000000}, 0x1c) 03:59:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x2}, [{}]}, 0x78) 03:59:35 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x1800, [0x305f, 0xa]}, 0x2c) [ 955.475115] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 955.475115] program syz-executor4 not setting count and/or reply_len properly 03:59:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0x8000a0}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:35 executing program 3: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x104) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x9) wait4(0x0, &(0x7f0000000100), 0x1000000, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}}}, &(0x7f0000000140)=0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000640)={r1, @in={{0x2, 0x4e22, @multicast1}}}, &(0x7f00000002c0)=0xfffffffffffffc90) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lookup_dcookie(0x8001, &(0x7f0000000340)=""/194, 0xc2) creat(&(0x7f0000000040)='./file0\x00', 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x0) fcntl$setstatus(r0, 0x4, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000600)='cgroup.procs\x00', 0x2, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) sendfile(r4, r3, &(0x7f0000000300)=0x100000, 0x100000001) 03:59:35 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x600, [0x305f, 0xa]}, 0x2c) [ 955.644623] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 955.644623] program syz-executor4 not setting count and/or reply_len properly 03:59:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0x6000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:35 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x5, [0x305f, 0xa]}, 0x2c) 03:59:36 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x101000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000380)={r3, 0x81f4}, 0x8) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000240)={'veth1_to_bridge\x00', {0x2, 0x4e21, @remote}}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f00000000c0)={0x10, 0x8, 0x6}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(r1, &(0x7f0000000500)={{0x0, 0x1, 0x2, 0x0, 0x151, 0xffffffffffffffff, 0x330, 0x3}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r4, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r4, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000003c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000002c0)='trusted.overlay.redirect\x00', &(0x7f0000000300)='./file0\x00', 0x8, 0x2) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080)=ANY=[]) r5 = accept4(r2, 0x0, &(0x7f0000000080), 0x0) setsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000280)={0x1f, {0x7fff, 0x80000000, 0x7, 0x0, 0x1ce, 0x863a}, 0x7}, 0xa) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000440)={0x10, 0x1, {0x54, 0x88, 0xfffffffffffff000, {0x81, 0xfffffffffffffc00}, {0x636, 0x7fffffff}, @cond=[{0x1, 0x4, 0x3, 0x830e, 0x487, 0x4fa}, {0x7fffffff, 0x7ff, 0x1, 0x1, 0x3f, 0x5}]}, {0x55, 0x10000, 0x9, {0x200, 0x8}, {}, @rumble={0xff, 0x4}}}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={r3, 0x6}, &(0x7f00000004c0)=0x8) r6 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r6, 0x0) 03:59:36 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x22030000}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0x2912}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) 03:59:36 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0xa, [0x305f, 0xa]}, 0x2c) 03:59:36 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000200)='dummy0\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = syz_open_dev$adsp(&(0x7f00000004c0)='/dev/adsp#\x00', 0x2, 0xc0400) ioctl$TIOCNXCL(r0, 0x540d) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, &(0x7f0000000280)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000340)=0x0) fcntl$setown(r1, 0x8, r2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x6, 0x80}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e20, 0x2, @empty, 0x2}}, 0x2e1, 0x80, 0x4, 0xc8, 0x7fff}, &(0x7f0000000180)=0x98) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000400)="5b698fb1b0850e3ce1e02c73d39afdf300fbe3d1edcd90d69db6f1b06e83225052337e0ca0bf78748e659bf4e423c00d2ab99a52d7771ae705206c33f2b502770834275291c4055204ef7e4c593aea04910d0e180575ebf17982373f26ab9667e5fd227cad77414224d386bc6b2a4e3165eeee8441a8739eb748650397b882e9ed0e742ff0735e2f7be6aca92c0389e22667", 0x92) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000240)=r5) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"69726c61bd15000000001f0000000020", 0x1012}) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000003c0)=0x2981, 0x4) 03:59:36 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x200, 0x200) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000140), &(0x7f0000000240)=0x18) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000080)={0x3, 0xffff}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="0a0775b005e381e5b3b628a6d57fcf7002962274a85d020037d2685e091ffed4a7a70ced5cb987120ffbb32e4efab842a766e24bdbb7", 0x2470b3d5) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) readv(r3, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/199, 0xc7}, {&(0x7f0000000400)=""/153, 0x99}], 0x2) 03:59:36 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x1800000000000000, [0x305f, 0xa]}, 0x2c) 03:59:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0x30000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 956.374691] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 956.374691] program syz-executor4 not setting count and/or reply_len properly [ 956.385074] sctp: [Deprecated]: syz-executor3 (pid 16026) Use of struct sctp_assoc_value in delayed_ack socket option. [ 956.385074] Use struct sctp_sack_info instead [ 956.496332] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 956.496332] program syz-executor4 not setting count and/or reply_len properly 03:59:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x5}, [{}]}, 0x78) [ 956.590462] sctp: [Deprecated]: syz-executor3 (pid 16036) Use of struct sctp_assoc_value in delayed_ack socket option. [ 956.590462] Use struct sctp_sack_info instead 03:59:36 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0xf00000000000000, [0x305f, 0xa]}, 0x2c) 03:59:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0xf0}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 956.638770] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 956.638770] program syz-executor4 not setting count and/or reply_len properly 03:59:36 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x101000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000380)={r3, 0x81f4}, 0x8) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000240)={'veth1_to_bridge\x00', {0x2, 0x4e21, @remote}}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f00000000c0)={0x10, 0x8, 0x6}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(r1, &(0x7f0000000500)={{0x0, 0x1, 0x2, 0x0, 0x151, 0xffffffffffffffff, 0x330, 0x3}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r4, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r4, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000003c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000002c0)='trusted.overlay.redirect\x00', &(0x7f0000000300)='./file0\x00', 0x8, 0x2) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080)=ANY=[]) r5 = accept4(r2, 0x0, &(0x7f0000000080), 0x0) setsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000280)={0x1f, {0x7fff, 0x80000000, 0x7, 0x0, 0x1ce, 0x863a}, 0x7}, 0xa) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000440)={0x10, 0x1, {0x54, 0x88, 0xfffffffffffff000, {0x81, 0xfffffffffffffc00}, {0x636, 0x7fffffff}, @cond=[{0x1, 0x4, 0x3, 0x830e, 0x487, 0x4fa}, {0x7fffffff, 0x7ff, 0x1, 0x1, 0x3f, 0x5}]}, {0x55, 0x10000, 0x9, {0x200, 0x8}, {}, @rumble={0xff, 0x4}}}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={r3, 0x6}, &(0x7f00000004c0)=0x8) r6 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r6, 0x0) [ 956.764730] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 956.764730] program syz-executor4 not setting count and/or reply_len properly [ 956.842669] sctp: [Deprecated]: syz-executor3 (pid 16064) Use of struct sctp_assoc_value in delayed_ack socket option. [ 956.842669] Use struct sctp_sack_info instead 03:59:37 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x8000a0ffffffff}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:37 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)="6f6f6d5f61646a00000026e7080900040000") sendfile(r1, r0, &(0x7f0000000240)=0x5d, 0x239ffffffffffff) r2 = getpid() tkill(r2, 0x16) 03:59:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0x29120000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x3}, [{}]}, 0x78) 03:59:37 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x101000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000380)={r3, 0x81f4}, 0x8) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000240)={'veth1_to_bridge\x00', {0x2, 0x4e21, @remote}}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f00000000c0)={0x10, 0x8, 0x6}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(r1, &(0x7f0000000500)={{0x0, 0x1, 0x2, 0x0, 0x151, 0xffffffffffffffff, 0x330, 0x3}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r4, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r4, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000003c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000002c0)='trusted.overlay.redirect\x00', &(0x7f0000000300)='./file0\x00', 0x8, 0x2) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080)=ANY=[]) r5 = accept4(r2, 0x0, &(0x7f0000000080), 0x0) setsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000280)={0x1f, {0x7fff, 0x80000000, 0x7, 0x0, 0x1ce, 0x863a}, 0x7}, 0xa) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000440)={0x10, 0x1, {0x54, 0x88, 0xfffffffffffff000, {0x81, 0xfffffffffffffc00}, {0x636, 0x7fffffff}, @cond=[{0x1, 0x4, 0x3, 0x830e, 0x487, 0x4fa}, {0x7fffffff, 0x7ff, 0x1, 0x1, 0x3f, 0x5}]}, {0x55, 0x10000, 0x9, {0x200, 0x8}, {}, @rumble={0xff, 0x4}}}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={r3, 0x6}, &(0x7f00000004c0)=0x8) r6 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r6, 0x0) 03:59:37 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x3f000000, [0x305f, 0xa]}, 0x2c) [ 957.300574] sctp: [Deprecated]: syz-executor3 (pid 16079) Use of struct sctp_assoc_value in delayed_ack socket option. [ 957.300574] Use struct sctp_sack_info instead [ 957.342650] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 957.342650] program syz-executor4 not setting count and/or reply_len properly [ 957.371770] syz-executor0 (16082): /proc/16071/oom_adj is deprecated, please use /proc/16071/oom_score_adj instead. 03:59:37 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0xa000000, [0x305f, 0xa]}, 0x2c) 03:59:37 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x4, [0x305f, 0xa]}, 0x2c) 03:59:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0xf000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:37 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x1000000000000000, [0x305f, 0xa]}, 0x2c) [ 957.624000] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 957.624000] program syz-executor4 not setting count and/or reply_len properly 03:59:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x4000000}, [{}]}, 0x78) 03:59:37 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x101000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000380)={r3, 0x81f4}, 0x8) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000240)={'veth1_to_bridge\x00', {0x2, 0x4e21, @remote}}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f00000000c0)={0x10, 0x8, 0x6}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(r1, &(0x7f0000000500)={{0x0, 0x1, 0x2, 0x0, 0x151, 0xffffffffffffffff, 0x330, 0x3}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501b362b0ae78"}, 0x4a) sendto$inet6(r4, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r4, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000003c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000002c0)='trusted.overlay.redirect\x00', &(0x7f0000000300)='./file0\x00', 0x8, 0x2) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080)=ANY=[]) r5 = accept4(r2, 0x0, &(0x7f0000000080), 0x0) setsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000280)={0x1f, {0x7fff, 0x80000000, 0x7, 0x0, 0x1ce, 0x863a}, 0x7}, 0xa) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000440)={0x10, 0x1, {0x54, 0x88, 0xfffffffffffff000, {0x81, 0xfffffffffffffc00}, {0x636, 0x7fffffff}, @cond=[{0x1, 0x4, 0x3, 0x830e, 0x487, 0x4fa}, {0x7fffffff, 0x7ff, 0x1, 0x1, 0x3f, 0x5}]}, {0x55, 0x10000, 0x9, {0x200, 0x8}, {}, @rumble={0xff, 0x4}}}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={r3, 0x6}, &(0x7f00000004c0)=0x8) r6 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r6, 0x0) [ 957.750129] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 957.750129] program syz-executor4 not setting count and/or reply_len properly [ 957.829273] sctp: [Deprecated]: syz-executor3 (pid 16111) Use of struct sctp_assoc_value in delayed_ack socket option. [ 957.829273] Use struct sctp_sack_info instead 03:59:38 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0xeffdffff00000000}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:40 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0xf00}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:40 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x2, [0x305f, 0xa]}, 0x2c) 03:59:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x600}, [{}]}, 0x78) 03:59:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000400)="66b9800000c00f326635000400000f300fc71e4425749e66b8eab9ffdd0f23d80f21f86635400000100f23f866b8ef6700000f23c00f21f8663501000f000f23f866b9860b000066b80300000066ba000000000f306666660fd5ef66b8ca9300000f23d00f21f86635100000010f23f8ba6100ec66b80d0000000f23d00f21f866351000000e0f23f8", 0x89}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$intptr(0x26, 0x100000000000002) clone(0x0, &(0x7f0000000300), &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000240)) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x408000, 0x0) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000000040)) socket$inet6(0xa, 0x0, 0x0) 03:59:40 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x2203000000000000}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:40 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x20000004e20}, 0x1c) getpgid(0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000100)=0x59aa, 0x4) recvmmsg(r0, &(0x7f0000004400)=[{{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000f80)=""/226, 0xe2}], 0x1, &(0x7f0000001080)=""/227, 0xe3}}], 0x1, 0x10000, &(0x7f00000045c0)={0x77359400}) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000002a00)=""/177, &(0x7f0000002ac0)=0xb1) recvmsg(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000e00)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000c40)=""/160, 0xa0}, 0x0) syz_emit_ethernet(0x437, &(0x7f0000000700)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev, @local, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "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"}}}}}}, &(0x7f0000001780)) clock_gettime(0x7, &(0x7f00000027c0)) recvmmsg(r0, &(0x7f0000001680)=[{{&(0x7f0000000bc0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000d40)=""/60, 0x3c}], 0x1, &(0x7f00000015c0)=""/161, 0xa1, 0x8}, 0x1f}], 0x1, 0x10000, &(0x7f0000002800)) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 03:59:40 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0xd, [0x305f, 0xa]}, 0x2c) [ 960.352686] sg_write: 1 callbacks suppressed [ 960.352740] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 960.352740] program syz-executor4 not setting count and/or reply_len properly 03:59:40 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:40 executing program 3: r0 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) modify_ldt$write(0x1, &(0x7f0000000040)={0x0, 0x20101800}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 960.481304] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 960.481304] program syz-executor4 not setting count and/or reply_len properly 03:59:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x10}, [{}]}, 0x78) 03:59:40 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0xa00000000000000, [0x305f, 0xa]}, 0x2c) 03:59:40 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0xffffff9e}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 960.640435] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 960.640435] program syz-executor4 not setting count and/or reply_len properly 03:59:40 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0x6000000000000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 960.714946] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 960.714946] program syz-executor4 not setting count and/or reply_len properly 03:59:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x60}, [{}]}, 0x78) 03:59:40 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0xf000000, [0x305f, 0xa]}, 0x2c) 03:59:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0xf0ffffff00000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 960.899526] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 960.899526] program syz-executor4 not setting count and/or reply_len properly [ 960.947817] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 960.947817] program syz-executor4 not setting count and/or reply_len properly 03:59:41 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x20000004e20}, 0x1c) getpgid(0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000100)=0x59aa, 0x4) recvmmsg(r0, &(0x7f0000004400)=[{{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000f80)=""/226, 0xe2}], 0x1, &(0x7f0000001080)=""/227, 0xe3}}], 0x1, 0x10000, &(0x7f00000045c0)={0x77359400}) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000002a00)=""/177, &(0x7f0000002ac0)=0xb1) recvmsg(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000e00)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000c40)=""/160, 0xa0}, 0x0) syz_emit_ethernet(0x437, &(0x7f0000000700)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev, @local, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "2b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e8642b2ab76618b824110c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a2f6e8261e07336c5692db37bb7d3cebf4a942b62f2fa6cceb7e488aa02b2e52c6f82bd3792845fff41cce52e0469d14821ce11491864860c11421a92dae3152eb23106a0c679d2b1f0a9809b56abdcf893f9531508f24e64ec911fd8e8b3c8fd2291f1a7b910222c38533d4caadac9acd194be7e53549c1719bdf668887a0e19db83b5356f8f7d93cbef1ef3505dcc40d0d2a02a2745ab518979b9c3774babfe8e70ead767c7a00289b8cc6e51d1a957548270cb3f5064961a88f61b34f9442d78ae5a8551713f9afb4269d689f9adb6b4a902a637184f7f899efe9fa0ddb45cd1076c4eeeda51ca8dc20dcfc9cc5f56768073b3f4c2c9f543324a4fd0b8bc7b95e232bf85bf222394fa4336ab4007d7ad2dc85afa6eb79ad2624c4be6c674ee98fce9a51786b7cc2b5044de114d36d2690e13bcedf96590c7d5aeb8040b74c4d6a5aa38a7c1f0857522f4f968795056b9a7034dc3444784f9486b575e44dec3216d72845500e63297d7197961e7e593ea3411001d1d47ba42d70e7af8e91246c02d7e37ff0eb60abebc37dd00315b4fbb09e77a6b5f7e8441818ebcfafecf622731f1db8a11fa2de8e30d808bedbfee104b3b1100f5094675521da07dd2a28be7e486b325a0f0e6d75116be1bbc2aa20deb64a6e4e7b824b12d009e6f1802f5a8e31559b125d71d00a5684fbde4668f5af1eb4ca04fa7c4ef4d2a194b0856e007"}}}}}}, &(0x7f0000001780)) clock_gettime(0x7, &(0x7f00000027c0)) recvmmsg(r0, &(0x7f0000001680)=[{{&(0x7f0000000bc0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000d40)=""/60, 0x3c}], 0x1, &(0x7f00000015c0)=""/161, 0xa1, 0x8}, 0x1f}], 0x1, 0x10000, &(0x7f0000002800)) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 03:59:41 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x700, [0x305f, 0xa]}, 0x2c) 03:59:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0x100000000000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x48000000}, [{}]}, 0x78) 03:59:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000001180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0x100000252, 0x0, &(0x7f0000893ff0), 0x10) shutdown(r0, 0x1) 03:59:41 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x4000000000000000}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:41 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x18, [0x305f, 0xa]}, 0x2c) [ 961.292279] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 961.292279] program syz-executor4 not setting count and/or reply_len properly 03:59:41 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x200000000000000, [0x305f, 0xa]}, 0x2c) 03:59:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0xffffff7f}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 961.391587] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 961.391587] program syz-executor4 not setting count and/or reply_len properly 03:59:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x2000}, [{}]}, 0x78) 03:59:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r1, &(0x7f00000000c0), 0x0, 0x20000802, &(0x7f0000000040)={0x2, 0x404e23, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000003c0), 0xfffffffffffffead, 0x21f4, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 03:59:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0xfffffff0}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 961.580660] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 961.580660] program syz-executor4 not setting count and/or reply_len properly [ 961.632349] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 961.632349] program syz-executor4 not setting count and/or reply_len properly 03:59:42 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0x5f]}, 0x2c) 03:59:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0xf00000000000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:42 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x20000004e20}, 0x1c) getpgid(0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000100)=0x59aa, 0x4) recvmmsg(r0, &(0x7f0000004400)=[{{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000f80)=""/226, 0xe2}], 0x1, &(0x7f0000001080)=""/227, 0xe3}}], 0x1, 0x10000, &(0x7f00000045c0)={0x77359400}) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000002a00)=""/177, &(0x7f0000002ac0)=0xb1) recvmsg(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000e00)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000c40)=""/160, 0xa0}, 0x0) syz_emit_ethernet(0x437, &(0x7f0000000700)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev, @local, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "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"}}}}}}, &(0x7f0000001780)) clock_gettime(0x7, &(0x7f00000027c0)) recvmmsg(r0, &(0x7f0000001680)=[{{&(0x7f0000000bc0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000d40)=""/60, 0x3c}], 0x1, &(0x7f00000015c0)=""/161, 0xa1, 0x8}, 0x1f}], 0x1, 0x10000, &(0x7f0000002800)) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 03:59:42 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x40000000000}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x700000000000000}]}, 0x78) 03:59:42 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x2]}, 0x2c) 03:59:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0x8000a0ffffffff}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0xffffff7f00000000}]}, 0x78) 03:59:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0x3f00000000000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x100000}]}, 0x78) 03:59:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff02e}]}) 03:59:42 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x6]}, 0x2c) 03:59:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x3800}]}, 0x78) 03:59:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0xf000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:43 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000000)="800000000002000019000000e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000001c0)) 03:59:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000100), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000040)="f90fa2dd95c1000f201b66b9b200004066b80208a1a366bae7fd76430f306726660f01f4883566b9800000c00f326635002000000f300fbff1660f586700", 0x3e}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:59:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x400000000000000}]}, 0x78) 03:59:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0x3f00}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:43 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0xa00000000000000]}, 0x2c) 03:59:43 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0xa0008000}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0xf}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:43 executing program 3: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000000000000000000000200000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000"]) getpid() r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x248380, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x81}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000004c0)={r1, 0x8}, 0x8) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) sched_setaffinity(0x0, 0xffffffffffffffd9, &(0x7f0000000280)) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000500)) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000380)={@dev}, &(0x7f0000000540)=0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) write$P9_RXATTRCREATE(r6, &(0x7f0000000140)={0x7, 0x21, 0x2}, 0x7) write$P9_RSETATTR(r6, &(0x7f0000000040)={0x7}, 0x7) sendfile(r3, r6, &(0x7f0000d83ff8), 0x800000000024) r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x50, &(0x7f00000000c0)}, 0x10) ioctl$DRM_IOCTL_DROP_MASTER(r7, 0x641f) 03:59:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x2000000000000000}]}, 0x78) [ 963.116617] EXT4-fs (loop0): bad geometry: block count 512 exceeds size of device (1 blocks) 03:59:43 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx\x00'}, 0x58) 03:59:43 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0xf000000]}, 0x2c) [ 963.346112] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:59:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x2000000}]}, 0x78) 03:59:43 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x1100]}, 0x2c) [ 963.478875] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 963.504585] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 963.530135] IPv6: ADDRCONF(NETDEV_UP): wlan2: link is not ready [ 963.549439] IPv6: ADDRCONF(NETDEV_UP): bond1: link is not ready [ 963.558125] 8021q: adding VLAN 0 to HW filter on device bond1 03:59:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000788000), 0x4) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) fallocate(r0, 0x11, 0x0, 0x100000001) creat(&(0x7f0000000700)='./bus\x00', 0x0) [ 963.615577] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:59:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0x300}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:43 executing program 3: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000000000000000000000200000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000"]) getpid() r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x248380, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x81}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000004c0)={r1, 0x8}, 0x8) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) sched_setaffinity(0x0, 0xffffffffffffffd9, &(0x7f0000000280)) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000500)) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000380)={@dev}, &(0x7f0000000540)=0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) write$P9_RXATTRCREATE(r6, &(0x7f0000000140)={0x7, 0x21, 0x2}, 0x7) write$P9_RSETATTR(r6, &(0x7f0000000040)={0x7}, 0x7) sendfile(r3, r6, &(0x7f0000d83ff8), 0x800000000024) r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x50, &(0x7f00000000c0)}, 0x10) ioctl$DRM_IOCTL_DROP_MASTER(r7, 0x641f) 03:59:43 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xef) connect$inet6(r0, &(0x7f00000009c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) write(r0, &(0x7f0000001480), 0x0) [ 963.934178] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:59:44 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0xf000000}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x800000}]}, 0x78) 03:59:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000003c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000000), &(0x7f00000000c0)=0x30) write$P9_RSTATFS(r2, &(0x7f0000000240)={0x43, 0x9, 0x0, {0xf90f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x1}}, 0x43) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r3 = msgget(0xffffffffffffffff, 0x0) ioctl$VT_RELDISP(r2, 0x5605) msgctl$IPC_STAT(r3, 0x2, &(0x7f00000001c0)=""/116) 03:59:44 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x4]}, 0x2c) 03:59:44 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0x1229}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:44 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000280)={0x0, 'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000000)=""/11, 0xb}, 0xff7a) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f00000003c0)={{0x0, @loopback, 0x0, 0x0, 'nq\x00'}, {@local, 0x0, 0x1, 0x7, 0x1, 0x10000}}, 0xfffffffffffffe8e) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000100)={0xa, 0x3, 0x0, 0x3}, 0xa) 03:59:44 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0xfffffffffffff000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x4800}]}, 0x78) 03:59:44 executing program 3: r0 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x22, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 03:59:44 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x400000000000000]}, 0x2c) 03:59:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x4c}]}, 0x78) 03:59:44 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:45 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0xf00}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0x3000000000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x6000000000000000}]}, 0x78) 03:59:45 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x8000000]}, 0x2c) 03:59:45 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x20000004e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000100)=0x59aa, 0x4) recvmmsg(r0, &(0x7f0000004400)=[{{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000f80)=""/226, 0xe2}], 0x1, &(0x7f0000001080)=""/227, 0xe3}}, {{&(0x7f0000001180)=@pppol2tp, 0x80, &(0x7f00000012c0), 0x0, &(0x7f0000001300)=""/255, 0xff, 0x7}}], 0x2, 0x10000, &(0x7f00000045c0)={0x77359400}) syz_emit_ethernet(0x437, &(0x7f0000000700)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev, @local, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "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"}}}}}}, &(0x7f0000001780)) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 03:59:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000001180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0x100000252, 0x0, &(0x7f0000893ff0), 0x10) shutdown(r0, 0x1) 03:59:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x80000000000000}]}, 0x78) 03:59:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0xffffff7f00000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:45 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0xb00]}, 0x2c) 03:59:45 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000004a00)=ANY=[], 0xffffff62) clock_gettime(0x4, &(0x7f00000000c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001540)=[{{&(0x7f0000000000), 0x80, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/148, 0x7}], 0x1, &(0x7f0000000640)=""/214, 0xd6}}, {{&(0x7f0000000900)=@hci, 0x80, &(0x7f0000000f40)=[{&(0x7f0000002980)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000fc0)=""/93, 0x5d}}], 0x2, 0x0, &(0x7f0000001680)={0x0, r2+30000000}) 03:59:45 executing program 3: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f0000000080)={0x3}, 0x8, 0x0) 03:59:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0x9effffff00000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:46 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x40000000}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x4c00}]}, 0x78) 03:59:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0xfffff000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:46 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socket$inet6(0xa, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x3fd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x20000004e20}, 0x1c) r1 = getpgid(0x0) syz_open_procfs(r1, &(0x7f0000000040)='fdinfo/4\x00') setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000100)=0x59aa, 0x4) recvmmsg(r0, &(0x7f0000004400)=[{{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000f80)=""/226, 0xe2}], 0x1, &(0x7f0000001080)=""/227, 0xe3}}, {{&(0x7f0000001180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000012c0), 0x0, &(0x7f0000001300)=""/255, 0xff, 0x7}}], 0x2, 0x10000, &(0x7f00000045c0)={0x77359400}) getsockopt$inet_tcp_buf(r2, 0x6, 0x3f, &(0x7f0000002a00)=""/177, &(0x7f0000002ac0)=0xb1) syz_emit_ethernet(0x437, &(0x7f0000000700)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev, @local, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "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"}}}}}}, &(0x7f0000001780)) clock_gettime(0x7, &(0x7f00000027c0)={0x0}) recvmmsg(r0, &(0x7f0000001680)=[{{&(0x7f0000000bc0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f00000012c0), 0x0, &(0x7f00000015c0)=""/161, 0xa1, 0x8}, 0x1f}], 0x1, 0x0, &(0x7f0000002800)={r3}) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000280)) 03:59:46 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x8000a0]}, 0x2c) 03:59:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0x3f000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 965.913976] sg_write: 24 callbacks suppressed [ 965.913993] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 965.913993] program syz-executor4 not setting count and/or reply_len properly 03:59:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0xfffffffc}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 965.998908] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 965.998908] program syz-executor4 not setting count and/or reply_len properly 03:59:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x7400}]}, 0x78) 03:59:46 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x3f00]}, 0x2c) 03:59:46 executing program 0: 03:59:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0x60}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 966.133575] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 966.133575] program syz-executor4 not setting count and/or reply_len properly 03:59:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 966.205177] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 966.205177] program syz-executor4 not setting count and/or reply_len properly 03:59:46 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x8dffffff}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x200000000000000}]}, 0x78) 03:59:46 executing program 0: 03:59:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0x400300}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:46 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x900000000000000]}, 0x2c) 03:59:46 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socket$inet6(0xa, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x3fd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x20000004e20}, 0x1c) r1 = getpgid(0x0) syz_open_procfs(r1, &(0x7f0000000040)='fdinfo/4\x00') setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000100)=0x59aa, 0x4) recvmmsg(r0, &(0x7f0000004400)=[{{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000f80)=""/226, 0xe2}], 0x1, &(0x7f0000001080)=""/227, 0xe3}}, {{&(0x7f0000001180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000012c0), 0x0, &(0x7f0000001300)=""/255, 0xff, 0x7}}], 0x2, 0x10000, &(0x7f00000045c0)={0x77359400}) getsockopt$inet_tcp_buf(r2, 0x6, 0x3f, &(0x7f0000002a00)=""/177, &(0x7f0000002ac0)=0xb1) syz_emit_ethernet(0x437, &(0x7f0000000700)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev, @local, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "2b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e8642b2ab76618b824110c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a2f6e8261e07336c5692db37bb7d3cebf4a942b62f2fa6cceb7e488aa02b2e52c6f82bd3792845fff41cce52e0469d14821ce11491864860c11421a92dae3152eb23106a0c679d2b1f0a9809b56abdcf893f9531508f24e64ec911fd8e8b3c8fd2291f1a7b910222c38533d4caadac9acd194be7e53549c1719bdf668887a0e19db83b5356f8f7d93cbef1ef3505dcc40d0d2a02a2745ab518979b9c3774babfe8e70ead767c7a00289b8cc6e51d1a957548270cb3f5064961a88f61b34f9442d78ae5a8551713f9afb4269d689f9adb6b4a902a637184f7f899efe9fa0ddb45cd1076c4eeeda51ca8dc20dcfc9cc5f56768073b3f4c2c9f543324a4fd0b8bc7b95e232bf85bf222394fa4336ab4007d7ad2dc85afa6eb79ad2624c4be6c674ee98fce9a51786b7cc2b5044de114d36d2690e13bcedf96590c7d5aeb8040b74c4d6a5aa38a7c1f0857522f4f968795056b9a7034dc3444784f9486b575e44dec3216d72845500e63297d7197961e7e593ea3411001d1d47ba42d70e7af8e91246c02d7e37ff0eb60abebc37dd00315b4fbb09e77a6b5f7e8441818ebcfafecf622731f1db8a11fa2de8e30d808bedbfee104b3b1100f5094675521da07dd2a28be7e486b325a0f0e6d75116be1bbc2aa20deb64a6e4e7b824b12d009e6f1802f5a8e31559b125d71d00a5684fbde4668f5af1eb4ca04fa7c4ef4d2a194b0856e007"}}}}}}, &(0x7f0000001780)) clock_gettime(0x7, &(0x7f00000027c0)={0x0}) recvmmsg(r0, &(0x7f0000001680)=[{{&(0x7f0000000bc0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f00000012c0), 0x0, &(0x7f00000015c0)=""/161, 0xa1, 0x8}, 0x1f}], 0x1, 0x0, &(0x7f0000002800)={r3}) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000280)) 03:59:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0xf0ffffff}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:47 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) accept(r0, &(0x7f0000000100)=@ll, &(0x7f0000000000)=0x40) [ 966.834659] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 966.834659] program syz-executor4 not setting count and/or reply_len properly 03:59:47 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000600)=""/9) r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0fe5f0028213ee20600d4ff5bffff00c7e5ed5e00000000c8550000000000000000", 0x48}], 0x1) 03:59:47 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x700000000000000]}, 0x2c) [ 966.958072] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 966.958072] program syz-executor4 not setting count and/or reply_len properly 03:59:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0xfcffffff}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0xffffffff00000000}]}, 0x78) [ 967.156655] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 967.156655] program syz-executor4 not setting count and/or reply_len properly [ 967.203996] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 967.203996] program syz-executor4 not setting count and/or reply_len properly 03:59:47 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0xfaa71c20}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)={0x8}) pwritev(r0, &(0x7f0000000700)=[{&(0x7f0000000680), 0xffffff04}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000180)=0x4) write$cgroup_int(r0, &(0x7f0000000080), 0x2b000) pwritev(r0, &(0x7f0000000100)=[{&(0x7f00000012c0)="d3", 0x1}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 03:59:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0x60000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:47 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0xffffffff00000000]}, 0x2c) 03:59:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x7a00000000000000}]}, 0x78) 03:59:47 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socket$inet6(0xa, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x3fd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x20000004e20}, 0x1c) r1 = getpgid(0x0) syz_open_procfs(r1, &(0x7f0000000040)='fdinfo/4\x00') setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000100)=0x59aa, 0x4) recvmmsg(r0, &(0x7f0000004400)=[{{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000f80)=""/226, 0xe2}], 0x1, &(0x7f0000001080)=""/227, 0xe3}}, {{&(0x7f0000001180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000012c0), 0x0, &(0x7f0000001300)=""/255, 0xff, 0x7}}], 0x2, 0x10000, &(0x7f00000045c0)={0x77359400}) getsockopt$inet_tcp_buf(r2, 0x6, 0x3f, &(0x7f0000002a00)=""/177, &(0x7f0000002ac0)=0xb1) syz_emit_ethernet(0x437, &(0x7f0000000700)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev, @local, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "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"}}}}}}, &(0x7f0000001780)) clock_gettime(0x7, &(0x7f00000027c0)={0x0}) recvmmsg(r0, &(0x7f0000001680)=[{{&(0x7f0000000bc0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f00000012c0), 0x0, &(0x7f00000015c0)=""/161, 0xa1, 0x8}, 0x1f}], 0x1, 0x0, &(0x7f0000002800)={r3}) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000280)) [ 967.664690] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 967.664690] program syz-executor4 not setting count and/or reply_len properly 03:59:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:47 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x800000000000000]}, 0x2c) [ 967.774160] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 967.774160] program syz-executor4 not setting count and/or reply_len properly 03:59:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0xfcffffff00000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x4800000000000000}]}, 0x78) 03:59:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060, 0x0, 0xf0ffff}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:48 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0xe000000]}, 0x2c) 03:59:48 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x4000}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:48 executing program 0: 03:59:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x500}]}, 0x78) 03:59:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0x9, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:48 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x13000000]}, 0x2c) 03:59:48 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) unshare(0x400) sync_file_range(r0, 0x0, 0x0, 0x0) 03:59:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x7a00}]}, 0x78) 03:59:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0x1ea4, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:48 executing program 3: 03:59:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xb, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:49 executing program 3: 03:59:49 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x2000000]}, 0x2c) 03:59:49 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x2203}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x48}]}, 0x78) 03:59:49 executing program 3: 03:59:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0x2000004c, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:49 executing program 0: 03:59:49 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x1400]}, 0x2c) 03:59:49 executing program 0: 03:59:49 executing program 3: 03:59:49 executing program 0: 03:59:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:49 executing program 3: 03:59:49 executing program 0: 03:59:50 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0xf}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:50 executing program 3: 03:59:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x5}]}, 0x78) 03:59:50 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x9]}, 0x2c) 03:59:50 executing program 0: 03:59:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:50 executing program 3: 03:59:50 executing program 0: 03:59:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x74}]}, 0x78) 03:59:50 executing program 0: 03:59:50 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x5]}, 0x2c) 03:59:51 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0xfffffff0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:51 executing program 3: 03:59:51 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:51 executing program 0: 03:59:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x3f00000000000000}]}, 0x78) 03:59:51 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x1100000000000000]}, 0x2c) 03:59:51 executing program 3: 03:59:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) request_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f00000000c0)={'sy.', 0x2}, &(0x7f0000000080)='syz', 0xffffffffffffffff) [ 971.152984] sg_write: 12 callbacks suppressed [ 971.153021] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 971.153021] program syz-executor4 not setting count and/or reply_len properly 03:59:51 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080), 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xffffffaa) listen(r0, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000001700)=@sack_info={0x0, 0x8}, 0xc) syz_mount_image$minix(&(0x7f0000001c00)='minix\x00', &(0x7f0000001c40)='./file0\x00', 0x0, 0x0, &(0x7f0000001c80), 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000240)=@nl=@unspec, 0x80, &(0x7f0000001ac0)}, 0x0) 03:59:51 executing program 0: syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0) 03:59:51 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:51 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x1300000000000000]}, 0x2c) [ 971.341566] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 971.341566] program syz-executor4 not setting count and/or reply_len properly 03:59:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x3f00000000000000}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000380), 0xffffffffffffff39, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x0, &(0x7f0000001880)={0xa, 0x0, 0xffff}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 03:59:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x2000}]}, 0x78) 03:59:52 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000788000), 0x4) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x11, 0x0, 0x100000001) 03:59:52 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x10000000]}, 0x2c) 03:59:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 972.051263] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 972.051263] program syz-executor4 not setting count and/or reply_len properly 03:59:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x500}]}, 0x78) 03:59:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x6}]}, 0x78) [ 972.124910] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 972.124910] program syz-executor4 not setting count and/or reply_len properly 03:59:52 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x3000000]}, 0x2c) 03:59:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x200000000000000}]}, 0x78) 03:59:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 972.283031] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 972.283031] program syz-executor4 not setting count and/or reply_len properly [ 972.355204] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 972.355204] program syz-executor4 not setting count and/or reply_len properly 03:59:53 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x8dffffff00000000}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:53 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000300)={0x0, 0xe1, "19252933fb6a42e4628257f06dd50a184e69f07742a71448c3e9832ed9902d46355288e683f53ef71b796b8ce557605a6f77f71e5237364d3bc48b0b199345493fd6876e7e3f03852997d1972be1de235898bddfbbe2409231667416d346eac1b11c7e13b798517c4b9d1111efe21a7b9e2120222fb140fcf4d1574a198bdf276de400641b9a7259ae21c9cf0de38d9bbb0349d6ab22778b6e82f9fcd7099ec5606b34a5036b3fca786079ed9e401594d7582820ed2bddec7fb813cf010494fbbc5bf2993da38724fe92e0061553f53627754fef2ab12cc2c511e6e69fde000baa"}, &(0x7f0000000080)=0x468) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r1, 0x200, 0x30}, 0xc) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000004c0)={0x1, 0x0, 0x3, 0x2}) uname(&(0x7f00000000c0)=""/165) poll(&(0x7f0000000500)=[{}, {0xffffffffffffffff, 0x2}], 0x2, 0x6) r2 = request_key(&(0x7f0000000400)='id_resolver\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)='/dev/vhci\x00', 0xfffffffffffffffb) add_key(&(0x7f00000001c0)='logon\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r2) 03:59:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:53 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x480000) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000800)='/dev/qat_adf_ctl\x00', 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000980)) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0, 0x3}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast2}}, 0xffff, 0x5, 0x1, 0xfff}, &(0x7f0000000380)=0x98) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0), 0x0, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000440)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) dup3(0xffffffffffffffff, r1, 0x80000) socket$alg(0x26, 0x5, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f00000001c0)={{0x0, @remote, 0x4e20, 0x2, 'lblcr\x00', 0x0, 0x7}, {@broadcast, 0x4e23, 0x0, 0x1, 0x5}}, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x46, 0x3}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x31030000, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000002c0)=0x1, 0x4) connect$l2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @loopback}, 0x0, 0x0, 0x4}}, 0x26) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3}) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000500)=0xfffffffffffffffe, 0xffffffffffffffa3) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="00ff0000000000008500000000000000000000000000000cdf00000000000000000000000000000085000000200000000000000000008a40923700000000000000000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x1f, 0x7c, &(0x7f0000000340)=""/124, 0x41000, 0x1, [], r4, 0x4}, 0x48) 03:59:53 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0xa00]}, 0x2c) 03:59:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x6c}]}, 0x78) 03:59:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 973.003174] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 973.003174] program syz-executor4 not setting count and/or reply_len properly 03:59:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 973.091502] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 973.091502] program syz-executor4 not setting count and/or reply_len properly 03:59:53 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0xffffffffa0008000]}, 0x2c) 03:59:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xed9, 0x20000) r0 = socket(0x11, 0xc0000, 0x56) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x14) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r1, 0x0) 03:59:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x7400000000000000}]}, 0x78) 03:59:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 973.365515] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 973.365515] program syz-executor4 not setting count and/or reply_len properly [ 973.421070] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 973.421070] program syz-executor4 not setting count and/or reply_len properly 03:59:53 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234418dc25d766070") r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x80000000002) write$binfmt_elf64(r1, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40}, [{}]}, 0x78) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x1b, &(0x7f0000000200)=""/27}, &(0x7f0000000440)="ea571ee726b1", &(0x7f00000000c0)=""/126, 0x0, 0x0, 0x0, &(0x7f0000000180)}) 03:59:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x9, 0x0) r3 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x0, 0x11dc00) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000004c0)={0x0, 0x0, [0xfff, 0x7ff, 0xffffffff00000001, 0x0, 0x7, 0x0, 0x1, 0x100000000]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$inet_tcp_buf(r3, 0x6, 0x1a, &(0x7f0000000300)="e095ea65c345e8688b7567b0125531cd8f8fb633d7c462b29da863dec2e119a8c282c36bcba470de190869211b97506e5afb3432fcc91eada2214c327468660bc84a1bd0d6f226622ea94706751cdd86490e6a9befda27950dbe556422dc9f8fa2c487a7b7a2f3eeca5065fc43237e95a9fe7fac60d7ab37fbcce2ebc417b26b97739c78e6eb3e4878a3826c26bbd276811d2cb6f631e567f1695667c331bae6d9762a1ce6fedf3a2a43611a913e18cf82439f8909124a0c4bfa3bddfe4ae2ea0ac66d8450e243430a2ec0574fd491af54141f12317d25", 0xd7) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000280), 0x2) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) syncfs(r1) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') accept4$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14, 0x80800) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000700)={@mcast1, 0x62, r6}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@dev, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@rand_addr}}, &(0x7f0000000440)=0xe8) accept4$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000740)={0x1, 0x10, 0xfa00, {&(0x7f0000000180), r10}}, 0x18) accept$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14) getpeername$packet(r2, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000880)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000e00)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000009c0)=0x1de) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000cc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="58020000", @ANYRES16=r5, @ANYBLOB="02002abd7000fcdbdf250000000008000100", @ANYRES32=r7, @ANYBLOB="4400020500000000000000006d6f646500000000000000000000000000000000000000000000080000000000080003000500000010000400726f756e64726f62696e000008000100", @ANYRES32=r8, @ANYBLOB="f001020040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e63650038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000100000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000000000008000600", @ANYRES32=r9, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000500000008000600", @ANYRES32=r11, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400080000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400ff030000080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000100000008000600", @ANYRES32=r13], 0x258}, 0x1, 0x0, 0x0, 0x80}, 0x4008810) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:59:53 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x10}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x3f00}]}, 0x78) 03:59:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:53 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0xd]}, 0x2c) 03:59:54 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x8000000000000000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000040)={0x5, 0x0, 0x4, 0x4, "1df105fc45e3188a3d026de1a9c8f3de55df5841185e7477c64ebfce9467d3a90cba9f1cab65b8321e4c69f9"}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85513, &(0x7f0000000200)={{0x5, 0x0, 0x0, 0x0, "86195c5f6d862e013a2f76442ee8b753ffe838973c28fddca83501e3463516037660c46107d1ab965d3aa901"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "260a799355392df37b409772ec0b18ad45f8393ae38dfa72eb8a4c6cb6de26c4c869de5ed38f81dbb4b0b77d9c52f5836999c6f111f4769edd21d83716cbf3be", &(0x7f00000001c0), 0x7}) 03:59:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x6800}]}, 0x78) 03:59:54 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x11]}, 0x2c) 03:59:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0x3b028fb06411ad30, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) semop(0x0, &(0x7f0000000200), 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x10000000000000ea) io_setup(0x3ff, &(0x7f0000000100)=0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x100, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='yeah\x00', 0x5) io_submit(r2, 0x0, &(0x7f00000002c0)) 03:59:54 executing program 3: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) wait4(0x0, &(0x7f0000000100), 0x1000000, &(0x7f0000000500)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000600)={@host}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000340)={[0x1000, 0x40, 0x0, 0x0, 0x6, 0x0, 0x539]}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) recvmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/164, 0xa4}], 0x2, &(0x7f0000000280)=""/65, 0x41, 0x7}, 0x40002020) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000640)={0x6f, 0x6, 0x0, {0x0, 0x1, 0x46, 0x0, "2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e333265300"}}, 0x6f) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$audion(&(0x7f00000006c0)='/dev/audio#\x00', 0x2, 0x40000) sendfile(0xffffffffffffffff, r2, &(0x7f0000000300)=0x100000, 0x100000001) 03:59:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 974.594294] syz-executor0 (16882) used greatest stack depth: 8760 bytes left 03:59:54 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:54 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0xb00000000000000]}, 0x2c) 03:59:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x38}]}, 0x78) 03:59:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:54 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005f80)=[{{&(0x7f00000010c0)=@xdp, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001840)=""/4096, 0x1000}], 0x1, &(0x7f0000001340)=""/129, 0x81}}], 0x1, 0x0, &(0x7f0000006200)={0x77359400}) recvmmsg(r0, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000580)=""/14, 0xe}, {&(0x7f00000005c0)=""/201, 0xc9}, {&(0x7f00000006c0)=""/107, 0x6b}, {&(0x7f0000000740)=""/241, 0xf1}, {&(0x7f0000000840)=""/245, 0xf5}], 0x5, &(0x7f0000002840)=""/4096, 0x1000, 0x5a014d35}, 0x5}, {{&(0x7f00000009c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000a40)=""/73, 0x49}, {&(0x7f0000000ac0)=""/98, 0x62}, {&(0x7f0000000b40)=""/79, 0x4f}, {&(0x7f0000000bc0)=""/234, 0xea}], 0x4, &(0x7f0000000d00)=""/24, 0x18, 0x1}, 0xdcb5}, {{&(0x7f0000000d40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000dc0)=""/56, 0x38}, {&(0x7f0000000e00)=""/148, 0x94}, {&(0x7f0000000ec0)=""/67, 0x43}, {&(0x7f0000000f40)=""/148, 0x94}, {&(0x7f0000003840)=""/4096, 0x1000}], 0x5, &(0x7f0000001080)=""/11, 0xb, 0xb44}, 0x1}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001140)=""/117, 0x75}, {&(0x7f00000011c0)=""/169, 0xa9}, {&(0x7f0000001400)=""/179, 0xb3}, {&(0x7f00000014c0)=""/177, 0xb1}], 0x4, 0x0, 0x0, 0xc44b}, 0xfffffffffffffffe}, {{&(0x7f0000001580)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001300)=[{&(0x7f0000001600)=""/182, 0xb6}, {&(0x7f00000016c0)=""/225, 0xe1}], 0x2, &(0x7f0000004840)=""/142, 0x8e, 0x10001}, 0x20c}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000004900)=""/133, 0x85}, {&(0x7f00000049c0)=""/165, 0xa5}], 0x2, &(0x7f0000004a80)=""/84, 0x54, 0x200}, 0x81}, {{&(0x7f0000004b00)=@xdp, 0x80, &(0x7f0000004f40)=[{&(0x7f0000004b80)=""/136, 0x88}, {&(0x7f0000004c40)=""/120, 0x78}, {&(0x7f0000004cc0)=""/125, 0x7d}, {&(0x7f0000004d40)=""/204, 0xcc}, {&(0x7f0000004e40)=""/207, 0xcf}], 0x5, &(0x7f0000004fc0)=""/197, 0xc5, 0x10001}, 0x1000}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f00000050c0)=""/197, 0xc5}, {&(0x7f0000001800)=""/16, 0x10}, {&(0x7f00000051c0)=""/7, 0x7}, {&(0x7f0000005200)=""/177, 0xb1}, {&(0x7f00000052c0)=""/41, 0x29}, {&(0x7f0000005300)=""/242, 0xf2}], 0x6, &(0x7f0000005480)=""/219, 0xdb, 0x80000001}, 0x2}], 0x8, 0x12100, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000005780)=0xb1, 0x4) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000004c0)) get_mempolicy(&(0x7f0000000500), &(0x7f0000000540), 0x20, &(0x7f0000ffa000/0x3000)=nil, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f00000000c0)={"33a490f47d72f8a793061129bc159615f1a2a420f2feee0b6e09d298e87077783da41030c8745d64cdd26e02c9377205c240a149a746bfc6b3488f419eba2bbf7e5958cbac8d6465c41de65761c7645a1975f02c59dcf2951412b2177b3741e27777185c42d6cea67a68e59dd8c04b43ce75b650d96dc7bc9099c352ddc1e2570c21b91f1f7fe71c2d6381d34d37ca19de5c3a3ec5076980afb93a894ed8499fc17311598af247ad2cf3d3ccbfde3d2907283aa9330801df36d23c92971d30605b934233e2114657a2f3cdffbf84dd546611067abdf72d74cec27749129d67d39fd875a07e849dad02537fa857735520a82d4aed0d8c2721787d5e06a24430633da4acc72eae870c24428811cfc6bf85a32238e348181dd1c014ca0ca113f0d336f5b7935a3077e37311ca098241ea035e1bd7568b4e9eb20c26f87b8888f5813178c4b609f00acd83e12905a7bb2e25b80e8223c5c502261c44728f71ee81c0f199e9e8315e4653be50268e7d3e66d9927e22309a9628ed84276a838b592f835a9a6dd0e558691fedf542cbfa3a917703091fe65f7965366cc8bac59bbeec7c6a29bf38038440c31e3f82ac1be952fca523a03eda834b24e75ed8ee11e3cf03b640910329ffc085817fbcb923f7430a4597169f160c893fb02d58c841ed400846632df9c257bb585b5aca8dabdede1c97bf46e1574b3ece21d5490e4c74b78dcefc3ae0854c6a22371f5106fd70c68c6e39bb8191adb57c0927ed4e327596316527562ac43e4871c4c6c3ef6bab93d436fdd4436a588ee56c5fcd77dc68ef75def6a84d017bb6924ba44f3d5806eb2b95f60b85e6badc7e41cad51f0ad4e461ca48030095be6d962d2d6e2ea40804736396b9dbe62069b55d91e80efff5b6a47da3afeba4f7fbf5c0f32933bbfd5ff2c4fbe41416a41e1c687d36e18525f90fd15bd4cb73c4de295353201b8cff1906f15b551815f61954d5d057fee35cccc973be80e215a82ac68dccfcb1af5d269d796c906a71f1bb501f45d2997b054f4f2cfeb7351ffd29b6a23101a5ff0b061e6581a2f3012bd76a1195e31965f57ea090a918d0d49ef86ac1f5a108ec8a9dbeb508a66de8862ca1f574b2e8232ed1221fb06c9e93d7055870d726acd310c9fc436ba11421f2b216343c0fd58cd37e32acab9e53c807069038eb0725eb328898a229e3b6d9299d2e0faaabf182896a29cf41be39346dc600c1cadba4e5c95a8784032b4c19b28f2eaaf73a104295dc3b681a2a140c5d04ddc7279a6b50e9f915bf55f93b3943a9071cb86eb1bcb17f916a89b2ee042072a1fe9282dd9cb44bb21e547e999176eafa6ec5e2920a0dc00b9fda4387775b49d7a5fc5ed53c4a365f4896ee1a793d96afedf850870adfe08138e63d75c2da11a9466210cdd40c7d53584be416af8534957f5cf79c63ec8771"}) preadv(r2, &(0x7f0000000140), 0x391, 0x51) 03:59:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0x3b028fb06411ad30, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) semop(0x0, &(0x7f0000000200), 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x10000000000000ea) io_setup(0x3ff, &(0x7f0000000100)=0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x100, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='yeah\x00', 0x5) io_submit(r2, 0x0, &(0x7f00000002c0)) 03:59:55 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) setxattr$security_smack_transmute(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x3) ptrace$setopts(0x4206, r1, 0x800000000000, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000000140)) wait4(0x0, 0x0, 0x40000000, &(0x7f0000781f70)) 03:59:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x500000000000000}]}, 0x78) 03:59:55 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x100000000000000]}, 0x2c) 03:59:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0xffffff7f}]}, 0x78) 03:59:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:55 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x900]}, 0x2c) 03:59:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x4000, 0x7000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000640)={"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"}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x1, 0x0, [{0x0, 0x3, 0x0, [], 0x1ff}]}}) 03:59:55 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x7a000000}]}, 0x78) 03:59:55 executing program 0: r0 = socket$inet6(0xa, 0x5, 0xc8ec) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$intptr(0x20, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) setpriority(0x1, r2, 0x1fc00000000) 03:59:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:55 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), &(0x7f0000000240)}}, &(0x7f00000002c0)) r0 = getpgid(0xffffffffffffffff) ptrace$getsig(0x4202, r0, 0x4, &(0x7f0000000080)) r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1) r2 = gettid() ioctl$int_in(r1, 0x800000c0045006, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) tkill(r2, 0x15) 03:59:55 executing program 0: setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000180), 0x4) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x0) r2 = dup3(r0, r1, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x101800, 0x0) 03:59:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x38000000}]}, 0x78) 03:59:55 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0xe]}, 0x2c) 03:59:55 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000080), 0xfffffffffffffe2e) 03:59:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:56 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400203) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x48f, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, "6c628000000000000000000000000020", 0x0, 0x4}, 0x2c) 03:59:56 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-vsock\x00', 0x2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0x0, 0xffffffffffffff9c, 0x0, 0x14, &(0x7f0000000400)='\'vboxnet0proc}em0&}\x00', 0xffffffffffffffff}, 0x30) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getegid() sendmsg$unix(r0, &(0x7f0000000580)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000100)=[{&(0x7f00000002c0)="08ae09fb32bbd6bc7b500f11c9e8bc04fa3b2e2f0b00748c82f50ca95ae04a3f803ba22dc7a8cec5881d4dca3282915c8892531026b42be6683bc125d7cf6f922fcafcd15e8c3a312ed548fd4d5672f09492eefd047457d2d3408e03c11fb558830fb1f9871af4b5685315de24d28bfa127ba34ca8dba77e39f3f0e5541be7a257cfb0a8fc188157773b3101ba76a36c8b5fbb6b0ab89cfbdd07f377d62a3b1049256ad851d3733ea2c92447b6f50137f4d8af8fb35a2e2d4be95659bef7df6950fa094a", 0xc4}, {&(0x7f00000000c0)="709b90fd5698542c68b26cde0b5822c16f296d464fffbec266fb33361895962ef1400a0f9656911352cbb574", 0x2c}], 0x2, &(0x7f0000000540)=[@rights={0x20, 0x1, 0x1, [r1, r2, r3]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}], 0x40, 0x20040011}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000280)="6e65742f69705f767300c8c9ccf4d5354f738619c29dc52c31d2d19c59c58a193cda60a0225814e1cc9ccd228563b4b034a4fbeb") preadv(r7, &(0x7f0000000480), 0x1000000000000157, 0x4800000000000000) 03:59:56 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x6000}]}, 0x78) 03:59:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:56 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x80}}, 0x1c}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) write$P9_RLERROR(r2, &(0x7f0000000000)={0x3c, 0x7, 0x2, {0x33, 'vmnet0ppp1vmnet1&vboxnet0[GPLposix_acl_accesssystem'}}, 0x3c) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:59:56 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r1 = socket$inet6(0xa, 0x803, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$inet6_tcp_buf(r1, 0x6, 0x3f, &(0x7f00000000c0)="554e4cf9bdd29ab4eed2a6323dc85163a8a33d50f38e62c04f7e73df1ae11c", 0x1f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x47, "d2a647f7895093e6299634b686db13f5429e7689ef3e6f896f2aeae91104cdab60c49e07b898883d778c8ddd12a729ff4851a7b1736e9023d7f12d9b84025f6fbc83714ce8596b"}, &(0x7f00000001c0)=0x4f) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000200)=r3, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:59:56 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x1000000000000000]}, 0x2c) [ 976.516313] sg_write: 13 callbacks suppressed [ 976.516347] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 976.516347] program syz-executor4 not setting count and/or reply_len properly 03:59:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x6800000000000000}]}, 0x78) 03:59:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 976.574122] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 976.581369] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 976.581369] program syz-executor4 not setting count and/or reply_len properly 03:59:56 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0xa0008000]}, 0x2c) 03:59:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 976.706551] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 976.706551] program syz-executor4 not setting count and/or reply_len properly [ 976.791849] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 976.791849] program syz-executor4 not setting count and/or reply_len properly 03:59:57 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x490800, 0x2) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140)={0x2, 0x9, 0x7, 0x7}, 0x8) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0xf401, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0x7, 0x3}]}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000100)) 03:59:57 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r1 = socket$inet6(0xa, 0x803, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$inet6_tcp_buf(r1, 0x6, 0x3f, &(0x7f00000000c0)="554e4cf9bdd29ab4eed2a6323dc85163a8a33d50f38e62c04f7e73df1ae11c", 0x1f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x47, "d2a647f7895093e6299634b686db13f5429e7689ef3e6f896f2aeae91104cdab60c49e07b898883d778c8ddd12a729ff4851a7b1736e9023d7f12d9b84025f6fbc83714ce8596b"}, &(0x7f00000001c0)=0x4f) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000200)=r3, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 976.994052] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:59:57 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:57 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0xa000000]}, 0x2c) 03:59:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x4c00000000000000}]}, 0x78) 03:59:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:57 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x53, 0xfffffffffffffffa, 0x1, 0x8, 0x8, 0x3, 0x3e, 0x8, 0x158, 0x40, 0x9, 0x4, 0x1, 0x38, 0x2, 0x8000, 0x7ff, 0x2}, [{0x7, 0x80, 0x2ea4ea8f, 0xff, 0x4, 0x80, 0x3, 0x3}, {0x6474e551, 0x81, 0x100000000, 0x3, 0x8e, 0x7fff, 0xffffffff, 0x1f}], "dc7717681a899079a84436a24d3b3ce9090876f0f823190add6581ba49de701deb212180c850766c7ed85311d6162cc2f91c7541ee1f5d", [[], [], [], [], [], []]}, 0x6e7) close(r1) r2 = socket$alg(0x26, 0x5, 0x0) io_setup(0x8, &(0x7f0000000100)=0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) dup3(r4, r2, 0x0) io_submit(r3, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140)}]) 03:59:57 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r1 = socket$inet6(0xa, 0x803, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$inet6_tcp_buf(r1, 0x6, 0x3f, &(0x7f00000000c0)="554e4cf9bdd29ab4eed2a6323dc85163a8a33d50f38e62c04f7e73df1ae11c", 0x1f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x47, "d2a647f7895093e6299634b686db13f5429e7689ef3e6f896f2aeae91104cdab60c49e07b898883d778c8ddd12a729ff4851a7b1736e9023d7f12d9b84025f6fbc83714ce8596b"}, &(0x7f00000001c0)=0x4f) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000200)=r3, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:59:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 977.400299] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 977.400299] program syz-executor4 not setting count and/or reply_len properly 03:59:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:57 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x401, 0x1, 0x1, 0x8, "2ee0e80e4c9a96b428708213b6a3d7a9bcb1a0587d0410ef8c2344a93ba74911d0fc2257a825f82e611ea100ac565e473ec9327b5c1124e88ecd221ec4bdccbe", "ee4e3ccb69f8721d3fe6c0fd0cd70c7d428e0e328fd40f636a452f511d196e78", [0x80000000, 0x2]}) r2 = socket$inet6(0xa, 0x3, 0x4) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x7530}}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x10}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x74, 0x10000000000) [ 977.502420] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 977.502420] program syz-executor4 not setting count and/or reply_len properly [ 977.523994] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:59:57 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x1300]}, 0x2c) 03:59:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0xa0}]}, 0x78) 03:59:57 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r1 = socket$inet6(0xa, 0x803, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$inet6_tcp_buf(r1, 0x6, 0x3f, &(0x7f00000000c0)="554e4cf9bdd29ab4eed2a6323dc85163a8a33d50f38e62c04f7e73df1ae11c", 0x1f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x47, "d2a647f7895093e6299634b686db13f5429e7689ef3e6f896f2aeae91104cdab60c49e07b898883d778c8ddd12a729ff4851a7b1736e9023d7f12d9b84025f6fbc83714ce8596b"}, &(0x7f00000001c0)=0x4f) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000200)=r3, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 977.673963] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 977.673963] program syz-executor4 not setting count and/or reply_len properly [ 977.753607] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 977.753607] program syz-executor4 not setting count and/or reply_len properly [ 977.895016] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:59:58 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:58 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x1200]}, 0x2c) 03:59:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x6000000}]}, 0x78) 03:59:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r1 = socket$inet6(0xa, 0x803, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$inet6_tcp_buf(r1, 0x6, 0x3f, &(0x7f00000000c0)="554e4cf9bdd29ab4eed2a6323dc85163a8a33d50f38e62c04f7e73df1ae11c", 0x1f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x47, "d2a647f7895093e6299634b686db13f5429e7689ef3e6f896f2aeae91104cdab60c49e07b898883d778c8ddd12a729ff4851a7b1736e9023d7f12d9b84025f6fbc83714ce8596b"}, &(0x7f00000001c0)=0x4f) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000200)=r3, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) 03:59:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x7f, &(0x7f0000534000), &(0x7f0000000040)=0x4) [ 978.284021] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 978.284021] program syz-executor4 not setting count and/or reply_len properly 03:59:58 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x22, &(0x7f0000000200)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2], [], @rand_addr}}, 0x118) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x7fffffff}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000140)={r4, 0x6}, &(0x7f0000000180)=0x8) 03:59:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 978.356624] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 978.356624] program syz-executor4 not setting count and/or reply_len properly [ 978.385131] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:59:58 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0xf]}, 0x2c) 03:59:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x60000000}]}, 0x78) 03:59:58 executing program 0: r0 = semget(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1000, 0x242080) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={r2, 0x4, 0x2, 0xfffffffffffffff9}, 0x10) semctl$IPC_RMID(r0, 0x0, 0x11) 03:59:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:59 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:59:59 executing program 0: perf_event_open(&(0x7f0000000180)={0x800000000000002, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000800)={&(0x7f0000000140)=@alg, 0x80, &(0x7f0000000340), 0x0, &(0x7f00000007c0)=""/22, 0x16}, 0x0) socketpair(0xa, 0x2, 0xfffffffffffff3c4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000200)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000080)=0xe8) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000380)={0xa0, 0x0, 0x1, {{0x2, 0x1, 0x8001, 0x9, 0x2, 0x7, {0x2, 0x1, 0x7f, 0x80000000, 0x4, 0x30, 0x5, 0x2, 0x7, 0xc5ed, 0x2, r3, r4, 0x8, 0x8001}}, {0x0, 0x1}}}, 0xa0) close(r0) 03:59:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x60}]}, 0x78) 03:59:59 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x1400000000000000]}, 0x2c) 03:59:59 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r1 = socket$inet6(0xa, 0x803, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$inet6_tcp_buf(r1, 0x6, 0x3f, &(0x7f00000000c0)="554e4cf9bdd29ab4eed2a6323dc85163a8a33d50f38e62c04f7e73df1ae11c", 0x1f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x47, "d2a647f7895093e6299634b686db13f5429e7689ef3e6f896f2aeae91104cdab60c49e07b898883d778c8ddd12a729ff4851a7b1736e9023d7f12d9b84025f6fbc83714ce8596b"}, &(0x7f00000001c0)=0x4f) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000200)=r3, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 03:59:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:59 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f00000000c0)='\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000140)='\x00\x00\x00') getdents64(r2, &(0x7f0000000380)=""/4096, 0x145f) 03:59:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x68}]}, 0x78) 03:59:59 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0xd00000000000000]}, 0x2c) 03:59:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 03:59:59 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r1 = socket$inet6(0xa, 0x803, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$inet6_tcp_buf(r1, 0x6, 0x3f, &(0x7f00000000c0)="554e4cf9bdd29ab4eed2a6323dc85163a8a33d50f38e62c04f7e73df1ae11c", 0x1f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x47, "d2a647f7895093e6299634b686db13f5429e7689ef3e6f896f2aeae91104cdab60c49e07b898883d778c8ddd12a729ff4851a7b1736e9023d7f12d9b84025f6fbc83714ce8596b"}, &(0x7f00000001c0)=0x4f) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 979.544422] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:00 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:00 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x7000000]}, 0x2c) 04:00:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x100000000000000}]}, 0x78) 04:00:00 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000008c0)) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x360d, &(0x7f0000000600)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f00000002c0)) mount$overlay(0x404000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file0,workdir=./Zile1\\\x00']) setxattr$security_smack_entry(&(0x7f0000000800)='./file1\x00', &(0x7f0000000840)='security.SMACK64MMAP\x00', &(0x7f0000000880)='[}$keyring\x00', 0xb, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001ac0)={{{@in6=@ipv4={[], [], @multicast2}, @in=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000001bc0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001cc0)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000001dc0)=0xe8) stat(&(0x7f0000001e00)='./file1\x00', &(0x7f0000001e40)) setxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x3}, [{}, {0x2, 0x1}], {0x4, 0x7}, [{0x8, 0x1, r1}, {0x8, 0x4}, {}, {0x8, 0x1, r1}], {0x10, 0x4}, {0x20, 0x3}}, 0x54, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001ec0)={{{@in6=@remote, @in=@broadcast}}, {{@in6=@mcast2}}}, &(0x7f0000001fc0)=0xe8) 04:00:00 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r1 = socket$inet6(0xa, 0x803, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$inet6_tcp_buf(r1, 0x6, 0x3f, &(0x7f00000000c0)="554e4cf9bdd29ab4eed2a6323dc85163a8a33d50f38e62c04f7e73df1ae11c", 0x1f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 04:00:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 980.067913] ntfs: (device loop0): ntfs_fill_super(): Unable to determine device size. [ 980.099691] overlayfs: failed to resolve './Zile1': -2 04:00:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x48000000}]}, 0x78) 04:00:00 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0xf00]}, 0x2c) [ 980.144832] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 980.231072] overlayfs: failed to resolve './Zile1': -2 04:00:00 executing program 0: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000415fc8)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000daff0)={&(0x7f0000000000)=ANY=[]}, 0x1, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="3370ce27bd644e58d495747f5ef50bcb377308f94fc304364de534b4c7987a1a6496011056d1f64051e493d70fc684e2c7d3d5fd96dc31f72435570c581ec70674323d2e"], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)={&(0x7f0000000380)='./file0/file0/../file0\x00'}, 0xfffffffffffffefe) accept4$unix(r0, &(0x7f00000001c0), &(0x7f0000000000)=0x6e, 0x80000) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000008c0), 0xffffffffffffffff) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000680)) accept(0xffffffffffffff9c, &(0x7f00000000c0)=@alg, &(0x7f0000000140)=0x80) 04:00:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:00 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r1 = socket$inet6(0xa, 0x803, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$inet6_tcp_buf(r1, 0x6, 0x3f, &(0x7f00000000c0)="554e4cf9bdd29ab4eed2a6323dc85163a8a33d50f38e62c04f7e73df1ae11c", 0x1f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 980.523321] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:01 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x3]}, 0x2c) 04:00:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x4}]}, 0x78) 04:00:01 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001f80)=[{{&(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)=""/95, 0x5f}, {&(0x7f0000000000)=""/62, 0x3e}], 0x2, &(0x7f0000000540)=""/221, 0xdd, 0x100000001}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000640)=""/199, 0xc7}, {&(0x7f0000000740)=""/141, 0x8d}], 0x2, &(0x7f0000000900)=""/52, 0x34}, 0x7f}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000cc0)}], 0x1, &(0x7f0000000dc0)=""/80, 0x50}, 0x9}, {{&(0x7f0000001540)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/99, 0x63}], 0x1, &(0x7f0000001900)=""/1, 0x1}, 0x20}, {{&(0x7f0000001940)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/250, 0xfa}], 0x1, &(0x7f0000001e80)=""/250, 0xfa}, 0x6}], 0x5, 0x100, &(0x7f0000002140)={0x0, 0x989680}) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r3 = add_key(&(0x7f0000000040)='.request_key_auth\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000002180)="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", 0x1000, 0xfffffffffffffffe) keyctl$assume_authority(0x10, r3) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 04:00:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:01 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r1 = socket$inet6(0xa, 0x803, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$inet6_tcp_buf(r1, 0x6, 0x3f, &(0x7f00000000c0)="554e4cf9bdd29ab4eed2a6323dc85163a8a33d50f38e62c04f7e73df1ae11c", 0x1f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 04:00:01 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x2200, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e23, 0x100000000, @empty, 0x7}, {0xa, 0x4e21, 0x9, @remote, 0x1}, 0x2, [0x2, 0x80000001, 0x4, 0x8, 0xe42, 0x3, 0x1, 0x5]}, 0x5c) recvmmsg(r0, &(0x7f00000041c0)=[{{&(0x7f00000000c0)=@sco, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/24, 0x18}, {&(0x7f0000000180)=""/255, 0xff}, {&(0x7f0000000280)=""/53, 0x35}], 0x3, &(0x7f0000000300)=""/16, 0x10, 0xfffffffffffff800}, 0xfffffffffffffffa}, {{&(0x7f0000000340)=@generic, 0x80, &(0x7f0000001a80)=[{&(0x7f00000003c0)=""/192, 0xc0}, {&(0x7f0000000480)=""/75, 0x4b}, {&(0x7f0000000500)=""/248, 0xf8}, {&(0x7f0000000600)=""/145, 0x91}, {&(0x7f00000006c0)=""/92, 0x5c}, {&(0x7f0000000740)=""/117, 0x75}, {&(0x7f00000007c0)=""/138, 0x8a}, {&(0x7f0000000880)=""/219, 0xdb}, {&(0x7f0000000980)=""/225, 0xe1}, {&(0x7f0000000a80)=""/4096, 0x1000}], 0xa, &(0x7f0000001b40)=""/212, 0xd4, 0x2}, 0x7}, {{&(0x7f0000001c40)=@sco, 0x80, &(0x7f0000004100)=[{&(0x7f0000001cc0)=""/153, 0x99}, {&(0x7f0000001d80)=""/147, 0x93}, {&(0x7f0000001e40)=""/137, 0x89}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000003f00)=""/27, 0x1b}, {&(0x7f0000003f40)=""/148, 0x94}, {&(0x7f0000004000)=""/198, 0xc6}], 0x8, &(0x7f0000004180)=""/14, 0xe, 0x365}, 0x57}], 0x3, 0x2, &(0x7f0000004280)={0x0, 0x989680}) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000042c0)={'yam0\x00', @remote}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000004340)=&(0x7f0000004300)) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000004380)=0x7, 0x4) r2 = fcntl$getown(r0, 0x9) ptrace$getsig(0x4202, r2, 0x7, &(0x7f00000043c0)) stat(&(0x7f0000004400)='./file0\x00', &(0x7f0000004440)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000044c0)={0x0, 0xb616, r2, 0x8, r3, 0x6, 0xaeb, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000004500)=@req) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000004540)={0x0, 0x5}, &(0x7f0000004580)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000045c0)={r4, 0x40, 0x9}, 0x8) delete_module(&(0x7f0000004600)='vmnet0cgroup\x00', 0x800) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000004640)='/dev/ptmx\x00', 0x200000, 0x0) clock_gettime(0x0, &(0x7f00000046c0)={0x0, 0x0}) ppoll(&(0x7f0000004680)=[{r0}, {r5, 0x80}, {r0, 0x100}], 0x3, &(0x7f0000004700)={r6, r7+30000000}, &(0x7f0000004740), 0x8) sigaltstack(&(0x7f0000ffb000/0x2000)=nil, 0x0) getegid() ioctl$SG_IO(r0, 0x2285, &(0x7f0000004b40)={0x0, 0xffffffffffffffff, 0x1d, 0x1, @scatter={0x4, 0x0, &(0x7f0000004980)=[{&(0x7f0000004780)=""/106, 0x6a}, {&(0x7f0000004800)=""/149, 0x95}, {&(0x7f00000048c0)=""/24, 0x18}, {&(0x7f0000004900)=""/105, 0x69}]}, &(0x7f00000049c0)="5a89ee0c074b70446ef7431f566d0219445fa61dae392b22c9b8107468", &(0x7f0000004a00)=""/243, 0x8001, 0x10017, 0x2, &(0x7f0000004b00)}) ioctl$TCXONC(r5, 0x540a, 0x4) r8 = syz_open_dev$mice(&(0x7f0000004bc0)='/dev/input/mice\x00', 0x0, 0x101000) ioctl$VT_DISALLOCATE(r5, 0x5608) clock_getres(0x0, &(0x7f0000004c00)) fsetxattr$security_evm(r0, &(0x7f0000004c40)='security.evm\x00', &(0x7f0000004c80)=@v2={0x3, 0x2, 0x4, 0x6}, 0xa, 0x2) fsetxattr$security_capability(r8, &(0x7f0000004cc0)='security.capability\x00', &(0x7f0000004d00)=@v3={0x3000000, [{0x9, 0x80000001}, {0x23f7, 0x6}], r3}, 0x18, 0x2) setsockopt$inet_opts(r8, 0x0, 0xd, &(0x7f0000004d40)="ad133c00238ee2455816fb46b5685d4bede359c925fddcb0161a6e8851ddaffb5f8d76181e566c69b013a47adfbc7a70b829e0d0e190df7bca707e5a068b7bbe12c2920149c4df54565ffba70230bb0a74d51dbd09563fe8ec85fc3c294158eb4fb5367197354330a03c8d899d22795df9a09c6f7f", 0x75) 04:00:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x300000000000000}]}, 0x78) 04:00:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:01 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r1 = socket$inet6(0xa, 0x803, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$inet6_tcp_buf(r1, 0x6, 0x3f, &(0x7f00000000c0)="554e4cf9bdd29ab4eed2a6323dc85163a8a33d50f38e62c04f7e73df1ae11c", 0x1f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 04:00:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x700}]}, 0x78) 04:00:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:01 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0xe00000000000000]}, 0x2c) 04:00:01 executing program 0: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) 04:00:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x10000000000000}]}, 0x78) 04:00:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:01 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r1 = socket$inet6(0xa, 0x803, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$inet6_tcp_buf(r1, 0x6, 0x3f, &(0x7f00000000c0)="554e4cf9bdd29ab4eed2a6323dc85163a8a33d50f38e62c04f7e73df1ae11c", 0x1f) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(0xffffffffffffffff) 04:00:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 981.826507] sg_write: 16 callbacks suppressed [ 981.826560] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 981.826560] program syz-executor4 not setting count and/or reply_len properly 04:00:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:02 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x3f00000000000000]}, 0x2c) 04:00:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x68000000}]}, 0x78) [ 981.941734] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 981.941734] program syz-executor4 not setting count and/or reply_len properly 04:00:02 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r1 = socket$inet6(0xa, 0x803, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 04:00:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff42f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x60000, 0x0) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xcffc) [ 982.051048] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 982.051048] program syz-executor4 not setting count and/or reply_len properly [ 982.107483] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 982.107483] program syz-executor4 not setting count and/or reply_len properly [ 982.163814] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:02 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:02 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x400, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000380)=""/129) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000240)={0x1}, 0x8) pipe2$9p(&(0x7f0000000300), 0x800) rt_sigtimedwait(&(0x7f0000000040)={0x8}, &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0x989680}, 0x5) madvise(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000002c0), 0x800) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000440)={0x0, 0xf7, "0bc7a9071d5ea2ee4b11061b337749c9d4df2937a88a43ae1da6c0ddcc56121bf8134b8cc12d140b7687e6e5c9ccb2164b6f21ba941649298927be90223a0e920b4f046f2d9a1726c86c9e9c4f334a5317a44cf47cfb31bed0a9d90dc33bb65d2e9d5de793a96c4779b632c8edef8c48ac1895a046f7989cb7e9130f0240fac935c1dd59446721d8426199c349721c36c54cdcb3c560ede2591b59140622826ee142e850b891c7f46e55f97ed828dbf20d853451f06c9598f0f5bb55b8b6f9be928b45b757fbb670c701a7f11b21c7458302b1bfb83b72208d04c3970ef59f14ba0940610af4c5247ba0e1655f6bb1d3c50deac087e198"}, &(0x7f0000000540)=0xff) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x3, 0x8001, 0x6, 0x6, r2}, &(0x7f00000005c0)=0x10) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000280)) write$cgroup_int(r1, &(0x7f0000000100)=0x7, 0x12) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000140)) r3 = getpid() sched_getattr(r3, &(0x7f0000000340), 0x30, 0x0) 04:00:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x20000000}]}, 0x78) 04:00:02 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0xb000000]}, 0x2c) 04:00:02 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r1 = socket$inet6(0xa, 0x803, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 982.647877] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 982.647877] program syz-executor4 not setting count and/or reply_len properly 04:00:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:02 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0xe00]}, 0x2c) [ 982.728727] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 982.728956] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 982.728956] program syz-executor4 not setting count and/or reply_len properly 04:00:02 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") r1 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast2, @multicast1}, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@broadcast, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @rand_addr=0xffffffffffffffff}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 04:00:03 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r1 = socket$inet6(0xa, 0x803, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 04:00:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x7a}]}, 0x78) [ 982.969822] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 983.046142] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 983.046142] program syz-executor4 not setting count and/or reply_len properly [ 983.104841] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 983.104841] program syz-executor4 not setting count and/or reply_len properly 04:00:03 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x6000000]}, 0x2c) 04:00:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 04:00:03 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:03 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r1 = socket$inet6(0xa, 0x803, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 04:00:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0xa000000000000000}]}, 0x78) 04:00:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 983.581484] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 983.581484] program syz-executor4 not setting count and/or reply_len properly [ 983.612320] binder: 17418:17429 got transaction to context manager from process owning it [ 983.634303] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 983.651298] binder: 17418:17429 transaction failed 29201/-22, size 0-12288 line 2825 04:00:03 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x700]}, 0x2c) 04:00:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 983.696015] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 983.696015] program syz-executor4 not setting count and/or reply_len properly 04:00:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x58, r1, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x58}}, 0x0) 04:00:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x1000000}]}, 0x78) 04:00:03 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r1 = socket$inet6(0xa, 0x803, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) [ 983.788841] binder: undelivered TRANSACTION_ERROR: 29201 04:00:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x3000000}]}, 0x78) [ 983.858402] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 983.881583] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 983.984226] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:04 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x800, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000000c0)="64263e0f0132f20f0131ba4100b80400ef0f06dde566b9800000c00f326635004000000f30b800008ee0baf80c66b800212b8266efbafc0c66b8b58ec8fa66efba4300ed0f96d5", 0x47}], 0x1, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000040)="b9800000c00f3235001000000f30f24c0f2c49e8426dc4027d3493b80800003626660f7e676d660f1678b06cc403f9dfbeb70000000bc7442400f5000000c744240284d178bcff1c24f2f347dbe1", 0x4e}], 0x1, 0x48, &(0x7f00000000c0), 0x10000000000003e9) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000300)={0x0, 0x0, 0x2080}) r4 = socket$netlink(0x10, 0x3, 0x9) write(r4, &(0x7f0000000100)="2700000014000710030e0000120f0a0010000100f5fe001259f338c57410e8a99f47ff00000007", 0x185) write$USERIO_CMD_REGISTER(r4, &(0x7f0000000000)={0x0, 0x8}, 0x2) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000140)) 04:00:04 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0xc00]}, 0x2c) 04:00:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xec0, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:04 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x6c000000}]}, 0x78) 04:00:04 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r1 = socket$inet6(0xa, 0x803, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r2) 04:00:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x200001d8, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x7000000}]}, 0x78) [ 984.543822] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:04 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0xb]}, 0x2c) 04:00:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xc0, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:04 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:04 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000280)={0x9, 0x3, 0x81, 0x20000000040, 0x5, 0x4, 0x4000000002, 0x400, 0xffffffffffffffff, 0x3}) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000300)=@add_del={0x2, &(0x7f00000002c0)='ipddp0\x00', 0x9}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000240)=""/43) sendmsg$nl_generic(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0xfffffff0}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400fcdfaa9b70df185eaf16fd0e3a48384e1ac117fd4f4cc071a1189dd843cc0fdafadc93e50d5101016cd64313fcb1827d7725d5dda974a74dd714f37778a16ff30fd3d04e92b570ea8ae2a1ab6fc81690ccbf03ed27e66bd1c97dd209fac28925a2e747327b6dbaff604241aef3b663c5e534872968b08f7b6e1b6a5ba91054ed5bc96dc8bbe8e8c17070456bd765e8ac238f50b232ab7c103c2b49c33d628c"], 0x165}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e21, @local}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e22, 0xff, @dev={0xfe, 0x80, [], 0x14}, 0x7fffffff}], 0x3c) recvfrom$unix(r1, &(0x7f0000000340)=""/86, 0x56, 0x102, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 04:00:04 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0xc]}, 0x2c) 04:00:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0xa0000000}]}, 0x78) 04:00:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xfffffdef, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 984.863692] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000440)='team\x00') syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x80000) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000140)=0xffd7, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x300, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f00000003c0)={0x0, 0x4}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000480)={0x401, 0x200, 0x0, 0x39, r5}, &(0x7f00000004c0)=0x10) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r6, 0x10, &(0x7f0000000500)={0x0, 0x0}) migrate_pages(r7, 0x4, &(0x7f0000000540)=0x80000000, &(0x7f0000000580)=0x3) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8400, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x1}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000300)={r9, 0x72}, 0x8) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000080", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r3, @ANYBLOB="7400020038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000000000038000700240001006e6f746966795f70656572735f696e74657276616c000000000000000000000008000300030000000800040000000000"], 0x90}}, 0x0) 04:00:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x33fe0, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:05 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0xc00000000000000]}, 0x2c) 04:00:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x600000000000000}]}, 0x78) 04:00:05 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x7ffff000, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:05 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0xfffffffffffffff8, 0x4000) write$P9_RSYMLINK(r0, &(0x7f00000000c0)={0x14, 0x11, 0x1, {0xc0, 0x0, 0x5}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b700000000000200bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b70600170000000000006506001701ed00001c14fdffffffffff6e465b00000000006b0a00fe00000000850000002e000000b700000000f4ffff940000000000000097d98d1fef346a68eeb4ce671d10caaa16e64725"], &(0x7f0000000100)='GPL\x00'}, 0x48) 04:00:05 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0xf00000000000000]}, 0x2c) 04:00:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x6c00000000000000}]}, 0x78) [ 985.454081] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x1ec0, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:05 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) [ 985.693815] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:06 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r3 = dup3(r0, r1, 0x0) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000001bc0)={0x5}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x308) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f00000018c0)={'nat\x00', 0x0, 0x3, 0x62, [], 0x4, &(0x7f00000004c0)=[{}, {}, {}, {}], &(0x7f0000000600)=""/98}, &(0x7f0000000580)=0x78) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f0000000280)=0x40) recvmsg$kcm(r2, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/47, 0x2f}, {&(0x7f00000005c0)=""/9, 0x9}, {&(0x7f00000006c0)=""/229, 0xe5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x4, &(0x7f0000001840)=""/33, 0x21, 0x1}, 0x0) setsockopt$inet6_dccp_buf(r5, 0x21, 0xce, &(0x7f0000001a40)="c78d93efff872271c09086e1b18a6ef8dab45ae7b6c03c9fc225916c28f9d7da7d5cbc90bebf9447daeb329ca3b4ee7afe3fa3978646d94f49fdb4f87a3a3842a58903d44a1d8d2035301630c2356d5304d24a101804eb23e3354b3db898240b18ee44695a245353b0fa0e592c8d92ea400633be645f6dc58f40609bfe082c3504d8d52cc3eb55e958153587ade99d360f22c463dbbeb884b65423a3a40f3cecd8e4acfb7605e7b7975691a576", 0xad) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000240)=0x10) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='memory.stat\x00', 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500), 0xc) bind$nfc_llcp(r5, &(0x7f0000001940)={0x27, 0x0, 0x1, 0x6, 0x7, 0x8, "2e14fc601aeebb56190b496f1c40446a5e9ef3a1d78e46f4794b960f84d92f01f747e5f73cd2a1e617b225210129b22d6fc854a36b6af1326b8fddc0be07a8", 0x24}, 0x60) bpf$MAP_CREATE(0x0, &(0x7f0000000400), 0x2c) sendmsg$key(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], 0x1c2}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001b80)={r5, &(0x7f0000001b00)="ac10a99a89216da9709c5f422180834c770bb227459ee150e3c606084b9812fa4d5475dc709d3bd42f", &(0x7f0000001b40)=""/10}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x200000080}, 0x2c) getsockname$packet(r7, &(0x7f0000000680), &(0x7f0000001800)=0x14) bind$nfc_llcp(r6, &(0x7f00000019c0)={0x27, 0x0, 0x1, 0x5, 0x0, 0x16824cb3, "79fd6dd8ebe48b0976518572984431560b168809dc6ff1b2288a0c932c038c006b140130e8341ebed0ad91cbda08772f2d637b618df14095d0e5e07d9811d0"}, 0x60) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000480)={0x7, 0x0, 0x80000001}, 0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r7, &(0x7f0000000300), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={0xffffffffffffffff, 0x3, 0x1, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x20) 04:00:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x5000000}]}, 0x78) 04:00:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xf, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:06 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x1200000000000000]}, 0x2c) 04:00:06 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0xf, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x3f000000}]}, 0x78) [ 986.265320] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x2912000000000000, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:06 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:06 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x200000000000000]}, 0x2c) 04:00:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x74000000}]}, 0x78) [ 986.475324] device nr0 entered promiscuous mode 04:00:07 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x300}]}, 0x78) 04:00:07 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0xd00]}, 0x2c) 04:00:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x200000000000000, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x3f000000}]}, 0x78) 04:00:07 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x3f00000000000000, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 987.098649] sg_write: 20 callbacks suppressed [ 987.098703] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 987.098703] program syz-executor4 not setting count and/or reply_len properly [ 987.130302] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 987.130302] program syz-executor0 not setting count and/or reply_len properly 04:00:07 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0x20) fallocate(r1, 0x3, 0x0, 0x10001) [ 987.224433] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 987.224433] program syz-executor4 not setting count and/or reply_len properly [ 987.238167] net_ratelimit: 1 callbacks suppressed [ 987.238179] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x10}]}, 0x78) 04:00:07 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x10]}, 0x2c) 04:00:07 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r0, 0x0, 0x2f, &(0x7f0000000040)=':selfkeyringwlan1v-wlan0systemposix_acl_access\x00', 0xffffffffffffffff}, 0x30) write$cgroup_pid(r1, &(0x7f0000000100)=r2, 0x39d) 04:00:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x8000a0ffffffff, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 987.383539] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 987.383539] program syz-executor4 not setting count and/or reply_len properly [ 987.492507] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 987.492507] program syz-executor4 not setting count and/or reply_len properly 04:00:08 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:08 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0xa0008000, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:08 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) pkey_alloc(0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000040)={0x7, 0x0, 0x0, 0x6d, 'syz0\x00', 0x1}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x40000000000004}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000080), &(0x7f0000000100)=0x4) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f00000001c0)=""/97) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 04:00:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x6c00}]}, 0x78) 04:00:08 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x300000000000000]}, 0x2c) [ 987.981454] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 987.981454] program syz-executor4 not setting count and/or reply_len properly [ 988.044396] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x30000, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:08 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x3f000000]}, 0x2c) [ 988.100919] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 988.100919] program syz-executor4 not setting count and/or reply_len properly 04:00:08 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x7}]}, 0x78) 04:00:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x29120000, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:08 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) pkey_alloc(0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000040)={0x7, 0x0, 0x0, 0x6d, 'syz0\x00', 0x1}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x40000000000004}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000080), &(0x7f0000000100)=0x4) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f00000001c0)=""/97) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 988.441057] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 988.441057] program syz-executor4 not setting count and/or reply_len properly [ 988.508142] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 988.682271] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 988.682271] program syz-executor4 not setting count and/or reply_len properly 04:00:09 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:09 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 04:00:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0xfffffff0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x600}]}, 0x78) 04:00:09 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) pkey_alloc(0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000040)={0x7, 0x0, 0x0, 0x6d, 'syz0\x00', 0x1}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x40000000000004}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000080), &(0x7f0000000100)=0x4) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f00000001c0)=""/97) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 988.935067] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 988.935067] program syz-executor4 not setting count and/or reply_len properly 04:00:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x9effffff, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 989.019874] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:09 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x600]}, 0x2c) 04:00:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x4c000000}]}, 0x78) 04:00:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x6000, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r0, r0, 0x0, 0x6ef7) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x9, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x3a, 0x0, @thr={&(0x7f0000000000)="c14a1aff96fba3e3d1a4f4099b2ac3d0dcd39357a3b8c92fcade1a767cbdc02ff80728686690d0e7edb6f300ac312c5bf801c1d97a72af7cff7273f50c47bbf68b71eeeb3c91d8340256f9727054208527c9922fd6627898ad7fac74ce48d6fce74fe5feacbb3a3e9d6b0f97bc7d7df2509e3b5a35d2d7968a0de85fa026d99c29d48eca95218f076ceca83102ca6c9d98c20d3e26ebe10260da07aec4fb2b9a4d9ea5a4acabbf8a96b14bf023653a835a2f1741ae9976a49afa8434f2fb8a152c9ebe24359ae64a5274c7fb7ab5", &(0x7f00000001c0)="8efeb9a08d2d682d96538a873326217a2546f89262590787153671709a344ef455e310dd16021f52e88ff8cf7439b8819c43c88b50ac7202fd71ae61f0ec2abfe83f0392474b056cc7158caf335470e1856e1c79106239cc2a203bf7ff0a373aab2f6d0647e0b3adf4bf3f99bf2b7aaf6edd3277b647deef067deb8762eab6b3b72e5bd9a32452fd38e0f4c7a95766fa8f38e0901778884a06eb9e8ae75a95fe042b2af64e90880838576972e21114ab9bf3b6c821fa0e5d0e268ab54e71a63a6adf5f7dc6d6c10d6969"}}, &(0x7f00000002c0)=0x0) timer_gettime(r1, &(0x7f0000000300)) openat$vhci(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhci\x00', 0xca002, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f00007a8000)={&(0x7f0000000380)=ANY=[@ANYBLOB="14f36f76bd49c9f53809672097c0d0112e1bf83f46b70000008001ffff00002d483cf00010000679474a73715a902bc5c208934fedf14b8fc7e94e4e1039b062"], 0x14}}, 0x0) [ 989.528517] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:09 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:09 executing program 0: mmap(&(0x7f0000a94000/0x3000)=nil, 0x3000, 0x0, 0x8972, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffff9c) mq_timedreceive(r0, &(0x7f0000000180)=""/251, 0xfb, 0x9, &(0x7f0000000280)={0x0, 0x1c9c380}) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x0, 0x3ff, 0xffffffff00000001, 0x5]}) pipe2(&(0x7f0000000ff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_dccp_buf(r0, 0x21, 0xe, &(0x7f0000000100)=""/51, &(0x7f0000000140)=0x33) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x80, {0x5, 0x1ff, 0x1, 0x621, 0x20, 0x8}}) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f0000a93000/0x3000)=nil, 0x20000002, 0x0, 0x0, &(0x7f0000b1c000/0x4000)=nil}) mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000000)={0x6, 0x0, 0x9bae, 0x2, 0x15, 0x400000000000000}) vmsplice(r2, &(0x7f0000b1d000)=[{&(0x7f0000005fe3)}], 0x1, 0x0) 04:00:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x3f000000, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:09 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x8]}, 0x2c) 04:00:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x4000000}]}, 0x78) 04:00:09 executing program 3: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r0) 04:00:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0xffffffffa0008000, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:10 executing program 0: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x2e800) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) 04:00:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x3800000000000000}]}, 0x78) 04:00:10 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x600000000000000]}, 0x2c) [ 989.908660] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x9effffff00000000, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:10 executing program 3: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r0) [ 990.141200] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x3}]}, 0x78) 04:00:10 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0x0, 0xabdbd685d3858ef5}) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000040)=@alg, &(0x7f00000000c0)=0x80, 0x80000) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in, @in=@local, 0x4e20, 0x1c81afad, 0x4e20, 0xffffffffffff0001, 0xa, 0x20, 0x0, 0x32, 0x0, r2}, {0x0, 0x10000008, 0x7fff, 0x6, 0x328a96b9, 0x6e, 0x3, 0x1}, {0x2, 0x1f, 0x3, 0x7}, 0x75c8dc4d, 0x6e6bbb, 0x3, 0x0, 0x2, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x1d}, 0x4d5, 0x6f}, 0x2, @in6=@dev={0xfe, 0x80, [], 0x21}, 0x0, 0x4, 0x3, 0x80, 0x7, 0x8, 0x8001}}, 0xe8) 04:00:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0xfcffffff00000000, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:10 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:10 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x5000000]}, 0x2c) 04:00:10 executing program 3: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r0) 04:00:10 executing program 0: socket$inet6(0xa, 0x3, 0x6) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x42) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000040)={0x5, 0x8, [0x5, 0x80000001]}) 04:00:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0xfcffffff, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 990.716419] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:10 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a02000000ff81004e227e00000058000b4824ca944f64009400050028925aa8000000000000008000f0ffffffff09000000fff5dd000000100001000a0c0c00fcff0000040e05a5", 0x58}], 0x14) 04:00:11 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x1000000]}, 0x2c) 04:00:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0xa000}]}, 0x78) 04:00:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x34000, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:11 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000016c0)='/dev/snd/seq\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/200, 0xc8}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[]}}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) [ 990.950127] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x2}]}, 0x78) 04:00:11 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:11 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x60, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x3}]}, 0x78) 04:00:11 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0xc000000]}, 0x2c) 04:00:11 executing program 0: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) keyctl$chown(0x4, r0, r1, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000000)) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080), 0x7, 0xffffffffffffffff) r3 = syz_open_dev$usb(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x4, 0x20080) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x0) 04:00:11 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x20100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000380)="0001000000ff000000000000c9030000ec000000010008000000080000000000002400000020000000010000000000006e9b00000000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000001c0)={[], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}]}) [ 991.605141] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x3, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:11 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x1800]}, 0x2c) 04:00:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x100000000000000}]}, 0x78) 04:00:11 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) [ 991.733918] EXT4-fs (loop0): Unrecognized mount option "mask=^MAY_EXEC" or missing value 04:00:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0xffffff7f00000000, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:12 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x6000000000000000, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:12 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sync_file_range(r0, 0x1, 0x8, 0x2) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9a3, 0x4) bind$packet(r0, &(0x7f0000000040)={0x11, 0x400000000000004, r1}, 0x14) syz_emit_ethernet(0x16, &(0x7f0000000080)={@empty, @broadcast, [], {@llc={0x4, {@snap={0x0, 0x0, '=', "ba6eb7"}}}}}, &(0x7f0000000180)) r2 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x3, 0x210000) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000001280)={0x2, &(0x7f0000000100)=""/20, &(0x7f0000001240)=[{0x80000001, 0x1000, 0x5, &(0x7f00000001c0)=""/4096}, {0x4, 0x56, 0xb068, &(0x7f00000011c0)=""/86}]}) 04:00:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x300000000000000}]}, 0x78) 04:00:12 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0xa]}, 0x2c) 04:00:12 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x3000000000000, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 992.474129] sg_write: 17 callbacks suppressed [ 992.474262] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 992.474262] program syz-executor4 not setting count and/or reply_len properly 04:00:12 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x12]}, 0x2c) [ 992.578342] net_ratelimit: 1 callbacks suppressed [ 992.578354] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:12 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x20800, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x4}, &(0x7f0000000180)=0x8) fallocate(r0, 0x60, 0xfffffffffffffff7, 0x5) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r2 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000580)='./file0\x00', 0x1000, 0x0) fallocate(r1, 0x1b, 0x9, 0x3) socket$nl_route(0x10, 0x3, 0x0) get_mempolicy(&(0x7f0000000200), &(0x7f0000000240), 0xfffffffffffffffa, &(0x7f0000ffb000/0x2000)=nil, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, &(0x7f00000002c0)=0xbc8, 0x1000007ffff000) 04:00:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0xf0ffffff, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x4c00000000000000}]}, 0x78) 04:00:12 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) [ 992.794984] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 992.794984] program syz-executor4 not setting count and/or reply_len properly [ 992.899626] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 992.899626] program syz-executor4 not setting count and/or reply_len properly 04:00:13 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x3f00, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:13 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x18]}, 0x2c) 04:00:13 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) readahead(r0, 0x2dd, 0xffff) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100)={0x0, 0x8001}, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000001380), 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_vif\x00') setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000140), 0x4) setns(r2, 0x3ffffffd) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x0) preadv(r2, &(0x7f0000000480), 0x1000000000000129, 0x6c00000000000000) 04:00:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x4c00}]}, 0x78) 04:00:13 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0xfffffffffffff000, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 993.370713] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 993.370713] program syz-executor4 not setting count and/or reply_len properly [ 993.466502] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 993.502406] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; 04:00:13 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x500000000000000]}, 0x2c) 04:00:13 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) readahead(r0, 0x2dd, 0xffff) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100)={0x0, 0x8001}, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000001380), 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_vif\x00') setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000140), 0x4) setns(r2, 0x3ffffffd) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x0) preadv(r2, &(0x7f0000000480), 0x1000000000000129, 0x6c00000000000000) [ 993.502406] program syz-executor4 not setting count and/or reply_len properly 04:00:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x6c00}]}, 0x78) 04:00:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0xf00, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:13 executing program 0: io_setup(0x4, &(0x7f0000000040)=0x0) socketpair$inet(0x2, 0x5, 0x7ff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) fcntl$getown(r2, 0x9) getpid() fcntl$getownex(r2, 0x10, &(0x7f0000000440)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000400)='fd/4\x00') io_cancel(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x8, r1, &(0x7f0000000140)="1481df0b62f43bb4326a517b9cbd6d2433371c2d9c51bab3529dba47a5fd266ca2a95cd2f0b5d6befde59270d47a9e93fecd8be419235afe479b465bc46073028117ccd93442bde39bc408895f417a0dfc751307ed7f96bd7c4844d407e21b851c6a6cc5932b34f6141146202969a605db61c4aa2a688f3502ab53adb29c2fc09d3acd9a6ce4b33fd29e3dba6e554e4115673a6e6f7ffccf8efb58d7ea393ed0a162a91047733dcc629cf68a435a25268d55b53602e40e67734c6d0250738b2be2d948f6717d5951a9", 0xc9, 0x7, 0x0, 0x1, r4}, &(0x7f00000002c0)) ioctl$TIOCGSID(r4, 0x5429, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000300)={0x7, 0x70, 0x1, 0x5, 0x1bd64000000000, 0xffffffffffff7fff, 0x0, 0x20, 0x0, 0x1, 0x0, 0x40, 0x0, 0x80000001, 0x7fff, 0x7, 0x5, 0x7, 0x1f, 0x8, 0x101, 0xeefe, 0x80, 0x8, 0x6, 0x100, 0x5, 0xc, 0xd8, 0x9, 0x4, 0x3ff, 0x7, 0x9, 0x3, 0x2, 0x800, 0x3, 0x0, 0x9, 0xf0b2f278371cda1f, @perf_config_ext={0x3ff, 0xc9}, 0x400, 0x1, 0x7fffffff, 0x1, 0xc0, 0x80000000000000, 0x10000}, r5, 0xa, 0xffffffffffffffff, 0xa) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) [ 993.725299] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 993.725299] program syz-executor4 not setting count and/or reply_len properly [ 993.794541] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 993.794541] program syz-executor4 not setting count and/or reply_len properly 04:00:14 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:14 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x2, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:14 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x11000000]}, 0x2c) 04:00:14 executing program 0: io_setup(0x4, &(0x7f0000000040)=0x0) socketpair$inet(0x2, 0x5, 0x7ff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) fcntl$getown(r2, 0x9) getpid() fcntl$getownex(r2, 0x10, &(0x7f0000000440)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000400)='fd/4\x00') io_cancel(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x8, r1, &(0x7f0000000140)="1481df0b62f43bb4326a517b9cbd6d2433371c2d9c51bab3529dba47a5fd266ca2a95cd2f0b5d6befde59270d47a9e93fecd8be419235afe479b465bc46073028117ccd93442bde39bc408895f417a0dfc751307ed7f96bd7c4844d407e21b851c6a6cc5932b34f6141146202969a605db61c4aa2a688f3502ab53adb29c2fc09d3acd9a6ce4b33fd29e3dba6e554e4115673a6e6f7ffccf8efb58d7ea393ed0a162a91047733dcc629cf68a435a25268d55b53602e40e67734c6d0250738b2be2d948f6717d5951a9", 0xc9, 0x7, 0x0, 0x1, r4}, &(0x7f00000002c0)) ioctl$TIOCGSID(r4, 0x5429, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000300)={0x7, 0x70, 0x1, 0x5, 0x1bd64000000000, 0xffffffffffff7fff, 0x0, 0x20, 0x0, 0x1, 0x0, 0x40, 0x0, 0x80000001, 0x7fff, 0x7, 0x5, 0x7, 0x1f, 0x8, 0x101, 0xeefe, 0x80, 0x8, 0x6, 0x100, 0x5, 0xc, 0xd8, 0x9, 0x4, 0x3ff, 0x7, 0x9, 0x3, 0x2, 0x800, 0x3, 0x0, 0x9, 0xf0b2f278371cda1f, @perf_config_ext={0x3ff, 0xc9}, 0x400, 0x1, 0x7fffffff, 0x1, 0xc0, 0x80000000000000, 0x10000}, r5, 0xa, 0xffffffffffffffff, 0xa) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x4c}]}, 0x78) 04:00:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0xf0ffffffffffff, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 994.323764] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 994.323764] program syz-executor4 not setting count and/or reply_len properly 04:00:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0xf0ffffff00000000, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 994.388612] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 994.388612] program syz-executor4 not setting count and/or reply_len properly [ 994.410967] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:14 executing program 0: io_setup(0x4, &(0x7f0000000040)=0x0) socketpair$inet(0x2, 0x5, 0x7ff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) fcntl$getown(r2, 0x9) getpid() fcntl$getownex(r2, 0x10, &(0x7f0000000440)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000400)='fd/4\x00') io_cancel(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x8, r1, &(0x7f0000000140)="1481df0b62f43bb4326a517b9cbd6d2433371c2d9c51bab3529dba47a5fd266ca2a95cd2f0b5d6befde59270d47a9e93fecd8be419235afe479b465bc46073028117ccd93442bde39bc408895f417a0dfc751307ed7f96bd7c4844d407e21b851c6a6cc5932b34f6141146202969a605db61c4aa2a688f3502ab53adb29c2fc09d3acd9a6ce4b33fd29e3dba6e554e4115673a6e6f7ffccf8efb58d7ea393ed0a162a91047733dcc629cf68a435a25268d55b53602e40e67734c6d0250738b2be2d948f6717d5951a9", 0xc9, 0x7, 0x0, 0x1, r4}, &(0x7f00000002c0)) ioctl$TIOCGSID(r4, 0x5429, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000300)={0x7, 0x70, 0x1, 0x5, 0x1bd64000000000, 0xffffffffffff7fff, 0x0, 0x20, 0x0, 0x1, 0x0, 0x40, 0x0, 0x80000001, 0x7fff, 0x7, 0x5, 0x7, 0x1f, 0x8, 0x101, 0xeefe, 0x80, 0x8, 0x6, 0x100, 0x5, 0xc, 0xd8, 0x9, 0x4, 0x3ff, 0x7, 0x9, 0x3, 0x2, 0x800, 0x3, 0x0, 0x9, 0xf0b2f278371cda1f, @perf_config_ext={0x3ff, 0xc9}, 0x400, 0x1, 0x7fffffff, 0x1, 0xc0, 0x80000000000000, 0x10000}, r5, 0xa, 0xffffffffffffffff, 0xa) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x2000000000000000}]}, 0x78) 04:00:14 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x14]}, 0x2c) 04:00:14 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) [ 994.605068] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 994.605068] program syz-executor4 not setting count and/or reply_len properly [ 994.723846] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:15 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x2000000, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:15 executing program 0: io_setup(0x4, &(0x7f0000000040)=0x0) socketpair$inet(0x2, 0x5, 0x7ff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) fcntl$getown(r2, 0x9) getpid() fcntl$getownex(r2, 0x10, &(0x7f0000000440)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000400)='fd/4\x00') io_cancel(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x8, r1, &(0x7f0000000140)="1481df0b62f43bb4326a517b9cbd6d2433371c2d9c51bab3529dba47a5fd266ca2a95cd2f0b5d6befde59270d47a9e93fecd8be419235afe479b465bc46073028117ccd93442bde39bc408895f417a0dfc751307ed7f96bd7c4844d407e21b851c6a6cc5932b34f6141146202969a605db61c4aa2a688f3502ab53adb29c2fc09d3acd9a6ce4b33fd29e3dba6e554e4115673a6e6f7ffccf8efb58d7ea393ed0a162a91047733dcc629cf68a435a25268d55b53602e40e67734c6d0250738b2be2d948f6717d5951a9", 0xc9, 0x7, 0x0, 0x1, r4}, &(0x7f00000002c0)) ioctl$TIOCGSID(r4, 0x5429, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000300)={0x7, 0x70, 0x1, 0x5, 0x1bd64000000000, 0xffffffffffff7fff, 0x0, 0x20, 0x0, 0x1, 0x0, 0x40, 0x0, 0x80000001, 0x7fff, 0x7, 0x5, 0x7, 0x1f, 0x8, 0x101, 0xeefe, 0x80, 0x8, 0x6, 0x100, 0x5, 0xc, 0xd8, 0x9, 0x4, 0x3ff, 0x7, 0x9, 0x3, 0x2, 0x800, 0x3, 0x0, 0x9, 0xf0b2f278371cda1f, @perf_config_ext={0x3ff, 0xc9}, 0x400, 0x1, 0x7fffffff, 0x1, 0xc0, 0x80000000000000, 0x10000}, r5, 0xa, 0xffffffffffffffff, 0xa) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x6000000}]}, 0x78) 04:00:15 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x13]}, 0x2c) 04:00:15 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240), 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0xf0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x38}]}, 0x78) [ 995.329071] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:15 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0xd000000]}, 0x2c) 04:00:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x300, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:15 executing program 0: io_setup(0x4, &(0x7f0000000040)=0x0) socketpair$inet(0x2, 0x5, 0x7ff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) fcntl$getown(r2, 0x9) getpid() fcntl$getownex(r2, 0x10, &(0x7f0000000440)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000400)='fd/4\x00') io_cancel(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x8, r1, &(0x7f0000000140)="1481df0b62f43bb4326a517b9cbd6d2433371c2d9c51bab3529dba47a5fd266ca2a95cd2f0b5d6befde59270d47a9e93fecd8be419235afe479b465bc46073028117ccd93442bde39bc408895f417a0dfc751307ed7f96bd7c4844d407e21b851c6a6cc5932b34f6141146202969a605db61c4aa2a688f3502ab53adb29c2fc09d3acd9a6ce4b33fd29e3dba6e554e4115673a6e6f7ffccf8efb58d7ea393ed0a162a91047733dcc629cf68a435a25268d55b53602e40e67734c6d0250738b2be2d948f6717d5951a9", 0xc9, 0x7, 0x0, 0x1, r4}, &(0x7f00000002c0)) ioctl$TIOCGSID(r4, 0x5429, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000300)={0x7, 0x70, 0x1, 0x5, 0x1bd64000000000, 0xffffffffffff7fff, 0x0, 0x20, 0x0, 0x1, 0x0, 0x40, 0x0, 0x80000001, 0x7fff, 0x7, 0x5, 0x7, 0x1f, 0x8, 0x101, 0xeefe, 0x80, 0x8, 0x6, 0x100, 0x5, 0xc, 0xd8, 0x9, 0x4, 0x3ff, 0x7, 0x9, 0x3, 0x2, 0x800, 0x3, 0x0, 0x9, 0xf0b2f278371cda1f, @perf_config_ext={0x3ff, 0xc9}, 0x400, 0x1, 0x7fffffff, 0x1, 0xc0, 0x80000000000000, 0x10000}, r5, 0xa, 0xffffffffffffffff, 0xa) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:15 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240), 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) [ 995.604719] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:16 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0xf000000, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x600000000000000}]}, 0x78) 04:00:16 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x14000000]}, 0x2c) 04:00:16 executing program 0: io_setup(0x4, &(0x7f0000000040)=0x0) socketpair$inet(0x2, 0x5, 0x7ff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) fcntl$getown(r2, 0x9) getpid() fcntl$getownex(r2, 0x10, &(0x7f0000000440)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000400)='fd/4\x00') io_cancel(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x8, r1, &(0x7f0000000140)="1481df0b62f43bb4326a517b9cbd6d2433371c2d9c51bab3529dba47a5fd266ca2a95cd2f0b5d6befde59270d47a9e93fecd8be419235afe479b465bc46073028117ccd93442bde39bc408895f417a0dfc751307ed7f96bd7c4844d407e21b851c6a6cc5932b34f6141146202969a605db61c4aa2a688f3502ab53adb29c2fc09d3acd9a6ce4b33fd29e3dba6e554e4115673a6e6f7ffccf8efb58d7ea393ed0a162a91047733dcc629cf68a435a25268d55b53602e40e67734c6d0250738b2be2d948f6717d5951a9", 0xc9, 0x7, 0x0, 0x1, r4}, &(0x7f00000002c0)) ioctl$TIOCGSID(r4, 0x5429, &(0x7f00000003c0)) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240), 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x3000000, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x2000}]}, 0x78) 04:00:16 executing program 0: io_setup(0x4, &(0x7f0000000040)=0x0) socketpair$inet(0x2, 0x5, 0x7ff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) fcntl$getown(r2, 0x9) getpid() fcntl$getownex(r2, 0x10, &(0x7f0000000440)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000400)='fd/4\x00') io_cancel(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x8, r1, &(0x7f0000000140)="1481df0b62f43bb4326a517b9cbd6d2433371c2d9c51bab3529dba47a5fd266ca2a95cd2f0b5d6befde59270d47a9e93fecd8be419235afe479b465bc46073028117ccd93442bde39bc408895f417a0dfc751307ed7f96bd7c4844d407e21b851c6a6cc5932b34f6141146202969a605db61c4aa2a688f3502ab53adb29c2fc09d3acd9a6ce4b33fd29e3dba6e554e4115673a6e6f7ffccf8efb58d7ea393ed0a162a91047733dcc629cf68a435a25268d55b53602e40e67734c6d0250738b2be2d948f6717d5951a9", 0xc9, 0x7, 0x0, 0x1, r4}, &(0x7f00000002c0)) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) [ 996.204502] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:16 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x4000000]}, 0x2c) 04:00:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0xf000, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x74}]}, 0x78) 04:00:17 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:17 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0xfffff000, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x7400000000000000}]}, 0x78) 04:00:17 executing program 0: io_setup(0x4, &(0x7f0000000040)) socketpair$inet(0x2, 0x5, 0x7ff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) fcntl$getown(r0, 0x9) getpid() fcntl$getownex(r0, 0x10, &(0x7f0000000440)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000400)='fd/4\x00') syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:17 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x9000000]}, 0x2c) 04:00:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x40030000000000, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x7a00}]}, 0x78) 04:00:17 executing program 0: io_setup(0x4, &(0x7f0000000040)) socketpair$inet(0x2, 0x5, 0x7ff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) fcntl$getown(r0, 0x9) getpid() fcntl$getownex(r0, 0x10, &(0x7f0000000440)) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) [ 997.131033] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:17 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x7]}, 0x2c) 04:00:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0xf00000000000000, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:17 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) [ 997.417777] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:18 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x3f00}]}, 0x78) 04:00:18 executing program 0: io_setup(0x4, &(0x7f0000000040)) socketpair$inet(0x2, 0x5, 0x7ff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) fcntl$getown(r0, 0x9) getpid() syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x300000000000000, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:18 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x8000a0ffffffff]}, 0x2c) 04:00:18 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) [ 997.914409] sg_write: 15 callbacks suppressed [ 997.914466] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 997.914466] program syz-executor4 not setting count and/or reply_len properly 04:00:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x400300, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:18 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x1800000000000000]}, 0x2c) 04:00:18 executing program 0: io_setup(0x4, &(0x7f0000000040)) socketpair$inet(0x2, 0x5, 0x7ff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) fcntl$getown(r0, 0x9) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) [ 997.993940] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 998.009643] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 998.009643] program syz-executor4 not setting count and/or reply_len properly 04:00:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x60000000, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:18 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x6800}]}, 0x78) [ 998.224092] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 998.224092] program syz-executor4 not setting count and/or reply_len properly [ 998.264939] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 998.277140] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 998.277140] program syz-executor4 not setting count and/or reply_len properly 04:00:18 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0xffffff7f, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:18 executing program 0: io_setup(0x4, &(0x7f0000000040)) socketpair$inet(0x2, 0x5, 0x7ff, &(0x7f0000000080)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x300}]}, 0x78) 04:00:18 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x12000000]}, 0x2c) 04:00:18 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0xf0ffff, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 998.840804] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 998.840804] program syz-executor4 not setting count and/or reply_len properly 04:00:19 executing program 0: io_setup(0x4, &(0x7f0000000040)) socketpair$inet(0x2, 0x5, 0x7ff, &(0x7f0000000080)) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:19 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x18000000]}, 0x2c) [ 998.892758] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 998.916473] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 998.916473] program syz-executor4 not setting count and/or reply_len properly 04:00:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x2912, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:19 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x500}]}, 0x78) [ 999.104506] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 999.104506] program syz-executor4 not setting count and/or reply_len properly [ 999.174340] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 999.202738] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 999.202738] program syz-executor4 not setting count and/or reply_len properly 04:00:19 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0xfffffffc, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:19 executing program 0: io_setup(0x4, &(0x7f0000000040)) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0xa0}]}, 0x78) 04:00:19 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:19 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x500]}, 0x2c) [ 999.683776] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 999.683776] program syz-executor4 not setting count and/or reply_len properly [ 999.727013] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 999.727013] program syz-executor4 not setting count and/or reply_len properly 04:00:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x400000000000000}]}, 0x78) 04:00:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0xf, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 999.767328] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:20 executing program 0: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:20 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0xf]}, 0x2c) 04:00:20 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:20 executing program 0: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) [ 1000.030825] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x500000000000000}]}, 0x78) 04:00:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x1229, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:20 executing program 0: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:20 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:20 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0x1200000000000000]}, 0x2c) 04:00:20 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x4c000000}]}, 0x78) 04:00:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x100000000000000, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 1000.634754] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:20 executing program 0: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:20 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0x1800]}, 0x2c) 04:00:20 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x8000a0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x74000000}]}, 0x78) 04:00:21 executing program 0: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) [ 1000.890358] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x1000000, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:21 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0xa00]}, 0x2c) 04:00:21 executing program 0: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:21 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:21 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x7000000}]}, 0x78) 04:00:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0xffffff9e, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x600}]}, 0x78) 04:00:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x2912, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:21 executing program 0: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) [ 1001.529638] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:21 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0xffffffffa0008000, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x10}]}, 0x78) 04:00:21 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0xf00]}, 0x2c) 04:00:21 executing program 0: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) [ 1001.786643] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x3f00000000000000, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:22 executing program 0: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x6800000000000000}]}, 0x78) 04:00:22 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0x18]}, 0x2c) 04:00:22 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:22 executing program 0: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x6000, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x6c00000000000000}]}, 0x78) 04:00:22 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0x14]}, 0x2c) 04:00:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0xf0ffffffffffff, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:22 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:23 executing program 0: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000)) 04:00:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x7a00000000000000}]}, 0x78) 04:00:23 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0x6]}, 0x2c) 04:00:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0xf00000000000000, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:23 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) [ 1003.252342] sg_write: 18 callbacks suppressed [ 1003.252433] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 1003.252433] program syz-executor4 not setting count and/or reply_len properly 04:00:23 executing program 0: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000)) [ 1003.303994] net_ratelimit: 2 callbacks suppressed [ 1003.304004] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x300000000000000, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 1003.378368] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 1003.378368] program syz-executor4 not setting count and/or reply_len properly 04:00:23 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:23 executing program 0: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000)) 04:00:23 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0x700]}, 0x2c) 04:00:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x3f000000}]}, 0x78) [ 1003.584869] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1003.612922] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 1003.612922] program syz-executor4 not setting count and/or reply_len properly [ 1003.657902] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 1003.657902] program syz-executor4 not setting count and/or reply_len properly 04:00:24 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:24 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0xa0008000, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:24 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0xd000000]}, 0x2c) 04:00:24 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x20000000}]}, 0x78) 04:00:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x9effffff, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:24 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}]}]}}}}}}}, &(0x7f0000000000)) [ 1004.136211] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 1004.136211] program syz-executor4 not setting count and/or reply_len properly 04:00:24 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0x9000000]}, 0x2c) [ 1004.209491] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1004.242540] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 1004.242540] program syz-executor4 not setting count and/or reply_len properly 04:00:24 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:24 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x34000, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 1004.480343] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:25 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x10000000000000}]}, 0x78) 04:00:25 executing program 0: syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {}]}]}}}}}}}, &(0x7f0000000000)) 04:00:25 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0x600]}, 0x2c) 04:00:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x60, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:25 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:25 executing program 0: syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {}]}]}}}}}}}, &(0x7f0000000000)) 04:00:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x200000000000000, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 1005.020926] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 1005.020926] program syz-executor4 not setting count and/or reply_len properly 04:00:25 executing program 0: syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {}]}]}}}}}}}, &(0x7f0000000000)) 04:00:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0xf0ffff, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 1005.140516] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 1005.140516] program syz-executor4 not setting count and/or reply_len properly 04:00:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x48}]}, 0x78) 04:00:25 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0x13]}, 0x2c) [ 1005.315292] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 1005.315292] program syz-executor4 not setting count and/or reply_len properly [ 1005.360865] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 1005.360865] program syz-executor4 not setting count and/or reply_len properly 04:00:26 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:26 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:26 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000), 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0xfcffffff, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x3f00000000000000}]}, 0x78) 04:00:26 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0x1300000000000000]}, 0x2c) 04:00:26 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x60000000, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x100000}]}, 0x78) 04:00:26 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0xa0008000]}, 0x2c) 04:00:26 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:26 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:26 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x29120000, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x4000000}]}, 0x78) 04:00:26 executing program 0: syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:26 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:26 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0xb000000]}, 0x2c) 04:00:27 executing program 0: syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x7a000000}]}, 0x78) 04:00:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0xf00, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:27 executing program 0: syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:27 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:27 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:27 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x4}]}, 0x78) 04:00:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x3, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:27 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0x900000000000000]}, 0x2c) 04:00:27 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:27 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x8000a0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:27 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x60}]}, 0x78) 04:00:28 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0x100000000000000]}, 0x2c) 04:00:28 executing program 0: syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:28 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:28 executing program 0: syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x1000000, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:28 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1}, 0xf00000000000000}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x80000000000000}]}, 0x78) 04:00:28 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0xd00000000000000]}, 0x2c) 04:00:28 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080), 0x1c) close(r1) 04:00:28 executing program 0: syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) [ 1008.525753] sg_write: 12 callbacks suppressed [ 1008.525808] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 1008.525808] program syz-executor4 not setting count and/or reply_len properly 04:00:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0xffffff7f00000000, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:28 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0x4]}, 0x2c) [ 1008.645462] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 1008.645462] program syz-executor4 not setting count and/or reply_len properly 04:00:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x3000000}]}, 0x78) 04:00:28 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(0xffffffffffffffff) 04:00:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0xfcffffff00000000, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:28 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) [ 1008.805906] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 1008.805906] program syz-executor4 not setting count and/or reply_len properly 04:00:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x3000000000000, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 1008.923811] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1008.950995] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 1008.950995] program syz-executor4 not setting count and/or reply_len properly 04:00:29 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1}, 0x2203000000000000}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:29 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0x800000000000000]}, 0x2c) 04:00:29 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x5000000}]}, 0x78) 04:00:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0xf0ffffff00000000, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x3000000, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:29 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x2, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 1009.465976] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 1009.465976] program syz-executor4 not setting count and/or reply_len properly [ 1009.570151] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 1009.570151] program syz-executor4 not setting count and/or reply_len properly 04:00:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x1000000}]}, 0x78) 04:00:29 executing program 0: syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x300, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:29 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0x900]}, 0x2c) [ 1009.774743] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 1009.774743] program syz-executor4 not setting count and/or reply_len properly [ 1009.847743] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 1009.847743] program syz-executor4 not setting count and/or reply_len properly 04:00:30 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1}, 0x4000000000000000}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x3000000}]}, 0x78) 04:00:30 executing program 0: syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x2912000000000000, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0xa0000000}]}, 0x78) 04:00:30 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0x1000000000000000]}, 0x2c) 04:00:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x3000000}]}, 0x78) 04:00:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x400300, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 1010.330922] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 1010.330922] program syz-executor4 not setting count and/or reply_len properly 04:00:30 executing program 0: syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) [ 1010.421783] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 1010.421783] program syz-executor4 not setting count and/or reply_len properly 04:00:30 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0x3f000000]}, 0x2c) 04:00:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x3000000}]}, 0x78) 04:00:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x700}]}, 0x78) 04:00:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0xf000, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:31 executing program 0: syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:31 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1}, 0xf000000}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x60}]}, 0x78) 04:00:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x5}]}, 0x78) 04:00:31 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0x5000000]}, 0x2c) 04:00:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x7a00}]}, 0x78) 04:00:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x3f00, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:31 executing program 0: syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0xffffffff00000000}]}, 0x78) 04:00:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0xfffffffffffff000, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:31 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0xa000000]}, 0x2c) 04:00:31 executing program 3 (fault-call:8 fault-nth:0): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:31 executing program 0: syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:32 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1}, 0xffffff8d}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x100000000000000, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0xffffff7f00000000}]}, 0x78) 04:00:32 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:32 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0x8000a0]}, 0x2c) 04:00:32 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x9effffff00000000, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:32 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) [ 1012.165877] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:32 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x200000000000000}]}, 0x78) 04:00:32 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0xa00000000000000]}, 0x2c) 04:00:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0xf000000, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:33 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1}, 0xfffffff0}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:33 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000018, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x700000000000000}]}, 0x78) 04:00:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x2000000, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:33 executing program 0: syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:33 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0x300000000000000]}, 0x2c) 04:00:33 executing program 0: syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0xf0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x7400}]}, 0x78) [ 1013.096881] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:33 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0xf000000]}, 0x2c) 04:00:33 executing program 0: syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0xffffff9e, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:34 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1}, 0xa0008000}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x68}]}, 0x78) 04:00:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x6000000000000000, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:34 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:34 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000008, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:34 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0x2000000]}, 0x2c) 04:00:34 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) [ 1013.916507] sg_write: 14 callbacks suppressed [ 1013.916564] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 1013.916564] program syz-executor4 not setting count and/or reply_len properly 04:00:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x3f000000, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 1013.975842] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 1013.975842] program syz-executor4 not setting count and/or reply_len properly [ 1014.007694] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x6c}]}, 0x78) 04:00:34 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0xd]}, 0x2c) 04:00:34 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0xfffff000, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 1014.166184] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 1014.166184] program syz-executor4 not setting count and/or reply_len properly [ 1014.288034] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 1014.288034] program syz-executor4 not setting count and/or reply_len properly 04:00:34 executing program 0: syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x30000, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x3800000000000000}]}, 0x78) 04:00:34 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1}, 0x22030000}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:34 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0x7]}, 0x2c) 04:00:34 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000022, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:35 executing program 0: syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) [ 1014.816449] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 1014.816449] program syz-executor4 not setting count and/or reply_len properly 04:00:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0xf0ffffff, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:35 executing program 0: syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) [ 1014.918853] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1014.940912] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 1014.940912] program syz-executor4 not setting count and/or reply_len properly 04:00:35 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0x700000000000000]}, 0x2c) 04:00:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0xfffffff0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x38000000}]}, 0x78) 04:00:35 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x40030000000000, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 1015.137991] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 1015.137991] program syz-executor4 not setting count and/or reply_len properly [ 1015.227178] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 1015.227178] program syz-executor4 not setting count and/or reply_len properly 04:00:35 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1}, 0x3f000000}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:35 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000003, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x8000a0ffffffff, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:35 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0xa000}]}, 0x78) 04:00:35 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0x1200]}, 0x2c) 04:00:35 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) [ 1015.717016] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 1015.717016] program syz-executor4 not setting count and/or reply_len properly 04:00:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0xffffff7f, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:36 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0x500000000000000]}, 0x2c) 04:00:36 executing program 0: syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) [ 1015.813555] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1015.844507] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 1015.844507] program syz-executor4 not setting count and/or reply_len properly 04:00:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x2}]}, 0x78) 04:00:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x1229, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:36 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1}, 0xf00}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:36 executing program 0: syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:36 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0x1800000000000000]}, 0x2c) 04:00:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0xf, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:36 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000009, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x6000000000000000}]}, 0x78) 04:00:36 executing program 0: syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0xfffffffc, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 1016.694497] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x6c000000}]}, 0x78) 04:00:36 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0x3f00000000000000]}, 0x2c) 04:00:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:37 executing program 0 (fault-call:0 fault-nth:0): syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) [ 1016.935475] FAULT_INJECTION: forcing a failure. [ 1016.935475] name failslab, interval 1, probability 0, space 0, times 0 [ 1016.947390] CPU: 0 PID: 19287 Comm: syz-executor0 Not tainted 4.19.0-rc8-next-20181016+ #95 [ 1016.955903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1016.965279] Call Trace: [ 1016.967894] dump_stack+0x244/0x39d [ 1016.971567] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1016.976807] should_fail.cold.4+0xa/0x17 [ 1016.980919] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1016.986047] ? print_usage_bug+0xc0/0xc0 [ 1016.990157] ? __mutex_lock+0x85e/0x16f0 [ 1016.994235] ? tun_get_user+0x1db5/0x4250 [ 1016.998438] ? mutex_trylock+0x2b0/0x2b0 [ 1017.002526] ? mark_held_locks+0x130/0x130 [ 1017.006785] ? print_usage_bug+0xc0/0xc0 [ 1017.010871] ? perf_trace_lock+0x14d/0x7a0 [ 1017.015127] ? debug_smp_processor_id+0x1c/0x20 [ 1017.019835] ? print_usage_bug+0xc0/0xc0 [ 1017.023907] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1017.029443] __should_failslab+0x124/0x180 [ 1017.033677] should_failslab+0x9/0x14 [ 1017.037478] kmem_cache_alloc+0x47/0x730 [ 1017.041549] __build_skb+0xab/0x430 [ 1017.045166] ? lock_is_held_type+0x210/0x210 [ 1017.049569] ? skb_try_coalesce+0x1b70/0x1b70 [ 1017.054054] ? perf_trace_lock+0x7a0/0x7a0 [ 1017.058285] ? __alloc_pages_nodemask+0xdd0/0xdd0 [ 1017.063120] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1017.068650] ? check_preemption_disabled+0x48/0x280 [ 1017.073673] __napi_alloc_skb+0x1d1/0x310 [ 1017.077816] napi_get_frags+0x67/0x140 [ 1017.081696] tun_get_user+0x1e1f/0x4250 [ 1017.085673] ? debug_smp_processor_id+0x1c/0x20 [ 1017.090436] ? aa_file_perm+0x469/0x1060 [ 1017.094499] ? tun_net_xmit+0x1c80/0x1c80 [ 1017.098632] ? zap_class+0x640/0x640 [ 1017.102441] ? aa_file_perm+0x490/0x1060 [ 1017.106496] ? find_held_lock+0x36/0x1c0 [ 1017.110551] ? tun_get+0x206/0x370 [ 1017.114081] ? lock_downgrade+0x900/0x900 [ 1017.118226] ? check_preemption_disabled+0x48/0x280 [ 1017.123239] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1017.128173] ? kasan_check_read+0x11/0x20 [ 1017.132313] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1017.137584] ? rcu_softirq_qs+0x20/0x20 [ 1017.141557] ? tun_get+0x22d/0x370 [ 1017.145095] ? tun_chr_close+0x180/0x180 [ 1017.149159] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1017.154093] ? common_file_perm+0x236/0x7f0 [ 1017.158412] tun_chr_write_iter+0xb9/0x160 [ 1017.162638] do_iter_readv_writev+0x8b0/0xa80 [ 1017.167127] ? vfs_dedupe_file_range+0x670/0x670 [ 1017.171874] ? apparmor_file_permission+0x24/0x30 [ 1017.176716] ? rw_verify_area+0x118/0x360 [ 1017.180857] do_iter_write+0x185/0x5f0 [ 1017.184743] ? dup_iter+0x270/0x270 [ 1017.188370] vfs_writev+0x1f1/0x360 [ 1017.191992] ? vfs_iter_write+0xb0/0xb0 [ 1017.195981] ? wait_for_completion+0x8a0/0x8a0 [ 1017.200578] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1017.206101] ? __fdget_pos+0xde/0x200 [ 1017.209910] ? __fdget_raw+0x20/0x20 [ 1017.213718] ? __sb_end_write+0xd9/0x110 [ 1017.217792] do_writev+0x11a/0x310 [ 1017.221322] ? vfs_writev+0x360/0x360 [ 1017.225120] ? trace_hardirqs_off_caller+0x300/0x300 [ 1017.230219] __x64_sys_writev+0x75/0xb0 [ 1017.234188] do_syscall_64+0x1b9/0x820 [ 1017.238064] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1017.243424] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1017.248343] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1017.253180] ? trace_hardirqs_on_caller+0x310/0x310 [ 1017.258298] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1017.263306] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1017.268313] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1017.273150] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1017.278326] RIP: 0033:0x457421 [ 1017.281513] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 b5 fb ff c3 48 83 ec 08 e8 1a 2d 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 63 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 1017.300401] RSP: 002b:00007f7048789ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 1017.308197] RAX: ffffffffffffffda RBX: 000000000000007e RCX: 0000000000457421 [ 1017.315456] RDX: 0000000000000001 RSI: 00007f7048789bf0 RDI: 00000000000000f0 [ 1017.322721] RBP: 00000000200000c0 R08: 00000000000000f0 R09: 0000000000000000 [ 1017.329973] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f704878a6d4 [ 1017.337244] R13: 00000000004c4890 R14: 00000000004d7b90 R15: 0000000000000003 04:00:37 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1}, 0x10}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x5001}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x60000000}]}, 0x78) 04:00:37 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000005, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:37 executing program 0 (fault-call:0 fault-nth:1): syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:37 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0x11000000]}, 0x2c) 04:00:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3, 0xfffffffffffff000}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:37 executing program 0: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x3800}]}, 0x78) [ 1017.609478] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:37 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0xb00]}, 0x2c) 04:00:37 executing program 0: syz_emit_ethernet(0xfffffdef, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3, 0x100000000000000}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:38 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1}, 0x201ca7fa}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x6}]}, 0x78) 04:00:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3, 0xffffff7f00000000}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:38 executing program 0: syz_emit_ethernet(0xfdef, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:38 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x2000000d, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:38 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0x500]}, 0x2c) 04:00:38 executing program 0: syz_emit_ethernet(0x2000013e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3, 0x40030000000000}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x4800000000000000}]}, 0x78) [ 1018.488730] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:38 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0x9]}, 0x2c) 04:00:38 executing program 0: syz_emit_ethernet(0x7ffff000, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3, 0x6000}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:39 executing program 0: syz_emit_ethernet(0xfffffffffffffdef, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0xffffff7f}]}, 0x78) 04:00:39 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1}, 0xfffffdef}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 04:00:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3, 0xf0ffffff}, [@nested={0x4}]}, 0x18}}, 0x0) 04:00:39 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0xe]}, 0x2c) 04:00:39 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6(0xa, 0x803, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000002, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 04:00:39 executing program 0: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 04:00:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34060}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x32, 0x829, 0x0, 0x0, {0x3, 0xffffff9e}, [@nested={0x4}]}, 0x18}}, 0x0) [ 1019.297414] sg_write: 14 callbacks suppressed [ 1019.297893] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 1019.297893] program syz-executor4 not setting count and/or reply_len properly 04:00:39 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x5, r0, 0x0, [0x305f, 0xa, 0x0, 0x5]}, 0x2c) [ 1019.416524] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 1019.416524] program syz-executor4 not setting count and/or reply_len properly [ 1019.437802] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:00:39 executing program 0: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) [ 1019.487868] WARNING: CPU: 1 PID: 19409 at include/net/sock.h:1539 tcp_cleanup_ulp+0x1ad/0x200 [ 1019.496995] Kernel panic - not syncing: panic_on_warn set ... [ 1019.497034] kobject: 'loop0' (00000000db62615c): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1019.502879] CPU: 1 PID: 19409 Comm: syz-executor3 Not tainted 4.19.0-rc8-next-20181016+ #95 [ 1019.502888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1019.502893] Call Trace: [ 1019.502899] [ 1019.502923] dump_stack+0x244/0x39d [ 1019.502942] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1019.543767] panic+0x2ad/0x55c [ 1019.546972] ? add_taint.cold.5+0x16/0x16 [ 1019.551139] ? __warn.cold.8+0x5/0x45 [ 1019.554946] ? __warn+0xe8/0x1d0 [ 1019.558331] ? tcp_cleanup_ulp+0x1ad/0x200 [ 1019.562577] __warn.cold.8+0x20/0x45 [ 1019.566299] ? rcu_softirq_qs+0x20/0x20 [ 1019.570282] ? tcp_cleanup_ulp+0x1ad/0x200 [ 1019.574529] report_bug+0x254/0x2d0 [ 1019.578167] do_error_trap+0x11b/0x200 [ 1019.582084] do_invalid_op+0x36/0x40 04:00:39 executing program 0: syz_emit_ethernet(0xd, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) [ 1019.585811] ? tcp_cleanup_ulp+0x1ad/0x200 [ 1019.590087] invalid_op+0x14/0x20 [ 1019.593552] RIP: 0010:tcp_cleanup_ulp+0x1ad/0x200 [ 1019.598399] Code: 83 c0 03 38 d0 7c 04 84 d2 75 61 44 8b 25 cb 4e df 02 31 ff 44 89 e6 e8 51 3d ed fa 45 85 e4 0f 84 91 fe ff ff e8 33 3c ed fa <0f> 0b e9 85 fe ff ff 4c 89 ef e8 34 84 30 fb e9 9f fe ff ff 4c 89 [ 1019.606133] kobject: 'loop0' (00000000db62615c): kobject_uevent_env [ 1019.617399] RSP: 0018:ffff8801daf06860 EFLAGS: 00010206 [ 1019.617413] RAX: ffff8801bff56100 RBX: ffff8801851b6200 RCX: ffffffff8690e6ff [ 1019.617421] RDX: 0000000000000100 RSI: ffffffff8690e70d RDI: 0000000000000005 [ 1019.617429] RBP: ffff8801daf06880 R08: ffff8801bff56100 R09: 0000000000000002 [ 1019.617441] R10: 0000000000000000 R11: ffff8801bff56100 R12: 0000000000000001 [ 1019.641328] kobject: 'loop0' (00000000db62615c): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1019.643705] R13: 0000000000000000 R14: 0000000000000003 R15: ffff8801daf069a0 [ 1019.643748] ? tcp_cleanup_ulp+0x19f/0x200 [ 1019.643762] ? tcp_cleanup_ulp+0x1ad/0x200 [ 1019.643791] tcp_v4_destroy_sock+0x15c/0x980 04:00:39 executing program 0: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x804, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) [ 1019.643810] ? debug_object_init_on_stack+0x20/0x20 [ 1019.643829] ? ip_queue_xmit+0x70/0x70 [ 1019.643849] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1019.702408] ? hrtimer_try_to_cancel+0xb8/0x6f0 [ 1019.706370] kobject: 'loop0' (00000000db62615c): kobject_uevent_env [ 1019.707086] ? tcp_set_state+0x1d0/0x9c0 [ 1019.717537] ? del_timer+0xf9/0x150 [ 1019.721170] ? detach_if_pending+0x6b0/0x6b0 [ 1019.721728] kobject: 'loop0' (00000000db62615c): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1019.725576] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1019.725593] ? check_preemption_disabled+0x48/0x280 [ 1019.725618] tcp_v6_destroy_sock+0x15/0x20 [ 1019.725637] inet_csk_destroy_sock+0x19f/0x440 [ 1019.725653] tcp_done+0x272/0x310 [ 1019.725670] tcp_v6_syn_recv_sock+0x1f21/0x25f0 [ 1019.762669] ? inet6_sk_rx_dst_set+0xb30/0xb30 [ 1019.767395] ? ip6_dst_lookup_tail+0xba3/0x1d60 [ 1019.772081] ? __local_bh_enable_ip+0x160/0x260 [ 1019.776777] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1019.782325] ? ip6_dst_lookup_tail+0x3c8/0x1d60 04:00:39 executing program 0: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x80b, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4033, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) [ 1019.787035] ? __lock_is_held+0xb5/0x140 [ 1019.791156] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1019.794262] kobject: 'loop0' (00000000db62615c): kobject_uevent_env [ 1019.796216] tcp_get_cookie_sock+0x10e/0x580 [ 1019.796238] ? cookie_ecn_ok+0x140/0x140 [ 1019.796256] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1019.796277] ? xfrm_lookup_route+0x74/0x1f0 [ 1019.811676] kobject: 'loop0' (00000000db62615c): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1019.816648] ? ip6_dst_lookup_flow+0x1ce/0x270 [ 1019.816666] ? ip6_dst_lookup+0x60/0x60 [ 1019.816684] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1019.816709] ? tcp_select_initial_window+0x1e6/0x400 [ 1019.816726] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1019.816749] cookie_v6_check+0x1830/0x27d0 [ 1019.816780] ? cookie_v6_init_sequence+0xe0/0xe0 [ 1019.864244] ? find_held_lock+0x36/0x1c0 [ 1019.868327] ? sk_filter_trim_cap+0x476/0xa60 [ 1019.872842] ? lock_downgrade+0x900/0x900 [ 1019.877016] ? check_preemption_disabled+0x48/0x280 [ 1019.882052] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1019.886991] ? kasan_check_read+0x11/0x20 [ 1019.891149] ? rcu_softirq_qs+0x20/0x20 [ 1019.895143] ? sk_filter_trim_cap+0xfb/0xa60 [ 1019.899561] ? perf_trace_lock_acquire+0x15b/0x800 [ 1019.904011] kobject: 'loop0' (00000000db62615c): kobject_uevent_env [ 1019.904510] ? tcp_v6_inbound_md5_hash+0x1b7/0x410 [ 1019.904532] tcp_v6_do_rcv+0x10ea/0x13c0 [ 1019.904560] ? tcp_v6_do_rcv+0x10ea/0x13c0 [ 1019.914343] kobject: 'loop0' (00000000db62615c): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1019.915881] tcp_v6_rcv+0x34e0/0x3ab0 04:00:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x4800}]}, 0x78) [ 1019.915900] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1019.915940] ? tcp_v6_reqsk_send_ack+0x370/0x370 [ 1019.915968] ? __lock_is_held+0xb5/0x140 [ 1019.951379] ip6_input_finish+0x3fc/0x1aa0 [ 1019.953903] kobject: 'loop4' (000000008a24fb8e): kobject_uevent_env [ 1019.955657] ? ip6_rcv_core.isra.16+0x1e10/0x1e10 [ 1019.967061] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1019.971119] kobject: 'loop4' (000000008a24fb8e): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1019.972082] ? nf_hook_slow+0x11e/0x1c0 [ 1019.972105] ip6_input+0xe4/0x600 [ 1019.972124] ? ip6_input_finish+0x1aa0/0x1aa0 [ 1019.972143] ? ip6_rcv_core.isra.16+0x1e10/0x1e10 [ 1019.972164] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1019.972182] ? kasan_check_read+0x11/0x20 [ 1019.972204] ? rcu_softirq_qs+0x20/0x20 [ 1019.972224] ip6_rcv_finish+0x17a/0x330 [ 1020.001272] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 1020.001272] program syz-executor4 not setting count and/or reply_len properly [ 1020.003392] ipv6_rcv+0x110/0x630 [ 1020.003410] ? ip6_input+0x600/0x600 [ 1020.003430] ? ip6_rcv_finish_core.isra.13+0x720/0x720 [ 1020.003457] ? lock_acquire+0x1ed/0x520 [ 1020.003473] ? process_backlog+0x1dd/0x7a0 [ 1020.003494] __netif_receive_skb_one_core+0x14d/0x200 [ 1020.003512] ? __netif_receive_skb_core+0x3b20/0x3b20 [ 1020.003529] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1020.003549] ? rcu_softirq_qs+0x20/0x20 [ 1020.026518] sg_write: data in/out 655324/74 bytes for SCSI command 0xff-- guessing data in; [ 1020.026518] program syz-executor4 not setting count and/or reply_len properly [ 1020.031580] ? trace_hardirqs_off_caller+0x300/0x300 [ 1020.031608] __netif_receive_skb+0x27/0x1e0 [ 1020.031627] process_backlog+0x24e/0x7a0 [ 1020.031642] ? try_to_wake_up+0x10a/0x12e0 [ 1020.031667] net_rx_action+0x7fa/0x19b0 [ 1020.031704] ? napi_complete_done+0x7a0/0x7a0 [ 1020.113934] ? check_preemption_disabled+0x48/0x280 [ 1020.118954] ? debug_smp_processor_id+0x1c/0x20 [ 1020.123644] ? debug_smp_processor_id+0x1c/0x20 [ 1020.128355] ? perf_trace_lock_acquire+0x15b/0x800 [ 1020.133302] ? lock_is_held_type+0x210/0x210 04:00:40 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x2aa8ea48) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1}, 0xeffdffff00000000}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) [ 1020.137730] ? zap_class+0x640/0x640 [ 1020.141449] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1020.146998] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1020.147603] kobject: 'loop2' (00000000bf99c883): kobject_uevent_env [ 1020.152547] ? check_preemption_disabled+0x48/0x280 [ 1020.152567] ? debug_smp_processor_id+0x1c/0x20 [ 1020.152583] ? perf_trace_lock+0x14d/0x7a0 [ 1020.152602] ? find_held_lock+0x36/0x1c0 [ 1020.163054] kobject: 'loop2' (00000000bf99c883): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1020.164013] ? clockevents_program_event+0x158/0x370 [ 1020.164029] ? lock_downgrade+0x900/0x900 [ 1020.164043] ? zap_class+0x640/0x640 [ 1020.199759] ? print_usage_bug+0xc0/0xc0 [ 1020.203823] ? trace_hardirqs_on+0x310/0x310 [ 1020.208250] ? kvm_clock_read+0x18/0x30 [ 1020.212224] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1020.217236] ? ktime_get+0x2c1/0x400 [ 1020.220945] ? zap_class+0x640/0x640 [ 1020.224648] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1020.230184] ? check_preemption_disabled+0x48/0x280 [ 1020.235203] ? __lock_is_held+0xb5/0x140 [ 1020.239295] __do_softirq+0x308/0xb7e [ 1020.243141] ? __irqentry_text_end+0x1f9688/0x1f9688 [ 1020.248276] ? irq_exit+0xbd/0x1c0 [ 1020.251830] ? smp_apic_timer_interrupt+0x1cb/0x760 [ 1020.256849] ? smp_reschedule_interrupt+0x109/0x650 [ 1020.261859] ? smp_call_function_single_interrupt+0x640/0x640 [ 1020.267762] ? ret_from_intr+0xb/0x1e [ 1020.271549] ? trace_hardirqs_off_caller+0xbb/0x300 [ 1020.276551] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1020.281389] ? trace_hardirqs_on_caller+0x310/0x310 [ 1020.286410] ? task_prio+0x50/0x50 [ 1020.289937] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1020.295497] ? check_preemption_disabled+0x48/0x280 [ 1020.300508] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1020.305345] ? ip6_finish_output2+0xcb1/0x27a0 [ 1020.310010] do_softirq_own_stack+0x2a/0x40 [ 1020.314314] [ 1020.316628] do_softirq.part.14+0x126/0x160 [ 1020.320936] __local_bh_enable_ip+0x21d/0x260 [ 1020.325430] ip6_finish_output2+0xce4/0x27a0 [ 1020.329828] ? ip6_copy_metadata+0xe30/0xe30 [ 1020.334229] ? ip6_mtu+0x39c/0x520 [ 1020.337910] ? lock_downgrade+0x900/0x900 [ 1020.342050] ? check_preemption_disabled+0x48/0x280 [ 1020.347073] ? zap_class+0x640/0x640 [ 1020.350787] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1020.356053] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1020.361601] ? check_preemption_disabled+0x48/0x280 [ 1020.366609] ? __lock_is_held+0xb5/0x140 [ 1020.370673] ip6_finish_output+0x468/0xc60 [ 1020.374918] ? ip6_finish_output+0x468/0xc60 [ 1020.379329] ip6_output+0x232/0x9d0 [ 1020.382953] ? ip6_finish_output+0xc60/0xc60 [ 1020.387365] ? ip6_fragment+0x38e0/0x38e0 [ 1020.391512] ? __lock_is_held+0xb5/0x140 [ 1020.395591] ip6_xmit+0xf64/0x2410 [ 1020.399118] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1020.404415] ? ip6_finish_output2+0x27a0/0x27a0 [ 1020.409085] ? inet6_csk_route_req+0x820/0x820 [ 1020.413680] ? ip6_append_data+0x2d0/0x2d0 [ 1020.417927] ? lock_acquire+0x1ed/0x520 [ 1020.421907] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1020.427430] ? check_preemption_disabled+0x48/0x280 [ 1020.432455] ? __lock_is_held+0xb5/0x140 [ 1020.436523] inet6_csk_xmit+0x375/0x630 [ 1020.440491] ? inet6_csk_update_pmtu+0x190/0x190 [ 1020.445241] ? tcp_schedule_loss_probe+0x530/0x530 [ 1020.450175] __tcp_transmit_skb+0x1bc5/0x3b00 [ 1020.454702] ? __tcp_select_window+0x9e0/0x9e0 [ 1020.459298] ? pvclock_read_flags+0x160/0x160 [ 1020.463797] ? tcp_write_xmit+0xf1/0x5710 [ 1020.467946] ? trace_hardirqs_off_caller+0x300/0x300 [ 1020.473056] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1020.478073] ? tcp_rtx_synack+0x730/0x730 [ 1020.482224] ? ktime_get_raw_ts64+0x4d0/0x4d0 [ 1020.486723] ? zap_class+0x640/0x640 [ 1020.490433] tcp_write_xmit+0x1676/0x5710 [ 1020.494631] ? __tcp_transmit_skb+0x3b00/0x3b00 [ 1020.499300] ? iov_iter_npages+0xdd0/0xdd0 [ 1020.503525] ? kasan_check_write+0x14/0x20 [ 1020.507743] ? copyin+0xb7/0x100 [ 1020.511099] ? _copy_from_iter_full+0x2b8/0xc20 [ 1020.515754] ? tcp_chrono_start+0x190/0x1e0 [ 1020.520065] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1020.525076] ? tcp_rate_check_app_limited+0x121/0x460 [ 1020.530273] ? iov_iter_advance+0x1370/0x1370 [ 1020.534763] tcp_push_one+0xdd/0x110 [ 1020.538481] tcp_sendmsg_locked+0xbc3/0x3fa0 [ 1020.542916] ? tcp_sendpage+0x60/0x60 [ 1020.546719] ? lock_is_held_type+0x210/0x210 [ 1020.551115] ? perf_trace_lock+0x7a0/0x7a0 [ 1020.555359] ? find_held_lock+0x36/0x1c0 [ 1020.559427] ? mark_held_locks+0xc7/0x130 [ 1020.563574] ? __local_bh_enable_ip+0x160/0x260 [ 1020.568228] ? __local_bh_enable_ip+0x160/0x260 [ 1020.572890] ? trace_hardirqs_on+0xbd/0x310 [ 1020.577203] ? lock_release+0xa10/0xa10 [ 1020.581177] ? lock_sock_nested+0xe2/0x120 [ 1020.585405] ? trace_hardirqs_off_caller+0x300/0x300 [ 1020.590497] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1020.596026] ? check_preemption_disabled+0x48/0x280 [ 1020.601064] ? lock_sock_nested+0x9a/0x120 [ 1020.605288] ? lock_sock_nested+0x9a/0x120 [ 1020.609526] ? __local_bh_enable_ip+0x160/0x260 [ 1020.614199] tcp_sendmsg+0x2f/0x50 [ 1020.617732] inet_sendmsg+0x19c/0x690 [ 1020.621632] ? ipip_gro_receive+0x100/0x100 [ 1020.625967] ? apparmor_socket_sendmsg+0x29/0x30 [ 1020.630713] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1020.636243] ? security_socket_sendmsg+0x94/0xc0 [ 1020.640995] ? ipip_gro_receive+0x100/0x100 [ 1020.645426] sock_sendmsg+0xd5/0x120 [ 1020.649132] __sys_sendto+0x3d7/0x670 [ 1020.652930] ? __ia32_sys_getpeername+0xb0/0xb0 [ 1020.657598] ? lock_release+0xa10/0xa10 [ 1020.661574] ? perf_trace_sched_process_exec+0x860/0x860 [ 1020.667014] ? trace_hardirqs_off_caller+0x300/0x300 [ 1020.672133] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1020.677674] ? put_timespec64+0x10f/0x1b0 [ 1020.682547] ? do_syscall_64+0x9a/0x820 [ 1020.686511] ? do_syscall_64+0x9a/0x820 [ 1020.690483] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1020.695056] ? trace_hardirqs_on+0xbd/0x310 [ 1020.699360] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1020.704970] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1020.710320] ? trace_hardirqs_off_caller+0x300/0x300 [ 1020.715431] __x64_sys_sendto+0xe1/0x1a0 [ 1020.719501] do_syscall_64+0x1b9/0x820 [ 1020.723374] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1020.728723] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1020.733650] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1020.738483] ? trace_hardirqs_on_caller+0x310/0x310 [ 1020.743506] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1020.748528] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1020.753540] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1020.758379] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1020.763563] RIP: 0033:0x457569 [ 1020.766775] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1020.785680] RSP: 002b:00007fc19544cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1020.793401] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457569 [ 1020.800664] RDX: 00000000ffffffee RSI: 0000000020000280 RDI: 0000000000000005 [ 1020.807917] RBP: 000000000072bfa0 R08: 0000000020000080 R09: 000000000000001c [ 1020.815171] R10: 0000000020000002 R11: 0000000000000246 R12: 00007fc19544d6d4 [ 1020.822424] R13: 00000000004c3921 R14: 00000000004d57d8 R15: 00000000ffffffff [ 1020.831007] Kernel Offset: disabled [ 1020.834650] Rebooting in 86400 seconds..