Warning: Permanently added '10.128.0.235' (ECDSA) to the list of known hosts. 2019/03/27 00:24:29 fuzzer started 2019/03/27 00:24:35 dialing manager at 10.128.0.26:36449 2019/03/27 00:24:35 syscalls: 1 2019/03/27 00:24:35 code coverage: enabled 2019/03/27 00:24:35 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/03/27 00:24:35 extra coverage: extra coverage is not supported by the kernel 2019/03/27 00:24:35 setuid sandbox: enabled 2019/03/27 00:24:35 namespace sandbox: enabled 2019/03/27 00:24:35 Android sandbox: /sys/fs/selinux/policy does not exist 2019/03/27 00:24:35 fault injection: enabled 2019/03/27 00:24:35 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/03/27 00:24:35 net packet injection: enabled 2019/03/27 00:24:35 net device setup: enabled 00:27:56 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x5c63, 0x10000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) mkdir(0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) syzkaller login: [ 322.320346] IPVS: ftp: loaded support on port[0] = 21 [ 322.480882] chnl_net:caif_netlink_parms(): no params data found [ 322.565387] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.572027] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.580518] device bridge_slave_0 entered promiscuous mode [ 322.590581] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.597225] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.605966] device bridge_slave_1 entered promiscuous mode [ 322.642158] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 322.654070] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 322.688634] team0: Port device team_slave_0 added [ 322.697597] team0: Port device team_slave_1 added [ 322.878039] device hsr_slave_0 entered promiscuous mode [ 323.082591] device hsr_slave_1 entered promiscuous mode [ 323.264329] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.270922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.278420] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.285065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.368418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.388644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 323.400003] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.410153] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.421434] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 323.442857] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.468513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 323.477491] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.484142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.492131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 323.500363] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.507045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.522469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 323.549925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 323.573828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 323.582823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 323.591933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 323.600770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 323.625245] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 323.635081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 323.670118] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 323.678813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 323.687387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 323.696966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 323.705377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 323.721920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.745330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 00:27:59 executing program 0: clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0) request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 00:27:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000280)=',', 0x1}], 0x1, 0x4081806) sendfile(r0, r2, 0x0, 0x20020102000007) ftruncate(r0, 0x3) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) clone(0x2502001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$FUSE_DIRENT(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="a5"], 0x1) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) [ 324.059499] encrypted_key: insufficient parameters specified 00:28:00 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:28:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000001ffb)={'\x00@\x00'}, 0x0, 0x0) 00:28:00 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x2f0}, 0x2f) 00:28:00 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x22, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {0x0, 0x0, r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr="924ee8f7e5fdedcdeef3ecb80ccf214f"}}}, 0xa0) 00:28:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$dmmidi(&(0x7f0000000780)='/dev/dmmidi#\x00', 0x8874, 0x20000) accept$inet6(0xffffffffffffff9c, &(0x7f0000000840)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000880)=0x1c) r1 = socket$inet6(0xa, 0x2, 0x7fff) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f00000008c0)={'ipvs\x00'}, &(0x7f00000001c0)=0x1d2) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x400be) r3 = dup2(r2, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$VIDIOC_G_INPUT(r3, 0x80045626, &(0x7f0000000100)) write$P9_RLINK(r3, &(0x7f0000000000)={0x485}, 0x2dd) ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x1d) ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, &(0x7f0000000280)={"1246c1e36dbb7dfecba7ce36374329ad8983286d05631a5f53edfcb82846904ed0d0ab86e080cf1481c66b357f7d1ef1e231c2d4c15b8e3fe859d9b118d0ff2f291a88cd28c1675e0d5ac7feeb4db437a77ba57a6ab0ce47da98a5225d7f034422ba9e0d9cb2a58438f7145b803823793ed3f2ad32a4afbb71c30b233d48a73d6bd294e171f1c961fd9943d352df6bc3920014284bdcac90675dd0ab12bd5067f3282d46458672bd95d5c009d67c7a5a3ceb4706fd085852b2deb4b26c30bc0b3638809ce60fee24d781ec70e4e431d5af6bb201a338b2d912de0f5be008319cac79f98003936fdbbe24cd0d6d67de38112006738882fe8a77f08fbf62744321216d45c83b166690cb8bee0879bf7ae1a1a6a39d0391c60a6c735e8f61396fdf02b930fb5b2cb513030ec2bcc2aec0f6ef459940b5c9687b76d88bb71ab2f9538c38ebd5833bd2f3842c6e957b80446ad1f0c402456f448e338f7e5d58c07c560a5cdd2e4aec6cc1b39f38632c5fd6818fab060e91ff9e98d8843a1ce3f4cac0f9a653bda5be9a520fd6b184546484e3b406872ccbed0336ff774679838bf4180eb17a868d07c86035ff326f6a21cb6e43d445962d3bb68df35b6a7a1ab56ac96a260857ef0a7850c9fa181e541e94b215b4f797165bbcaf32d6eb8c7659574ac1eb92afbd8cf3737a11f7668415184db72036ef8f33bcceda93cc9184ee11a2dba4f0c878c70393e0a60eabfc57b4d272f787d0d2d22313379f22c1f461e57b9d305a5dace15e164d25bb410c9fe9183b9405d0e7e2a5bfaea162394677f61a35514154a3240f634ca2bd9b2dc46029a4ae49b02a1d8da84a8548944d5cf457b193d431bec36e0f3601c5b5a1826e06da32cae292644cc0afb05760a9bcaea6523a32e68f6014205e43baba9902e6acf2bc7a141834fd83abe987c9545394aefd3cd4afee324b1090c77532c637c39c93b42be5365b4ea2f8db228fee6e66ee29e2e2e248d2bfef8407b7eab23d2ea99d5cd43afb9ec6e914d41e5666fc5b0085aa966989dfbcb94875aa3d6be11de94bd614de8c6a1c5bd14abd0a23d47c0b76e5667c7501f051a39b9ca20dff484d8e22abedd0d019b67194597adcb862eb0bf2936edfc0f6fb94230f07a6253694e64f31fe965eba71f55d809c4a3d3c96913414096456be63e37bafd0a124af083b3bc4cad7a1af8653db621f1070e68196ea7684c791ad5933398dc253c73d95fd5431d7c284cddb82959027ef106170bf0a2d250f487750ce716c1a0f6ab39decec7be8aff8db8af9eafbd56c925672e4dd91fe50eb2882b0197f034a99be669fc13f1a1f32c17f9f0f25cef3428ecdf971e375d2a31c0242303f4eefc5eff59a2ff073e2e66a9774bf239adf7cfe284ff11979f995f0d5bfc55872bbebdf0f070cd761578c15bc308fee2dc85ff92c"}) 00:28:00 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='syscall\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x420c42, 0x0) socketpair$unix(0x1, 0x26, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read$eventfd(r0, 0x0, 0x0) 00:28:00 executing program 0: r0 = socket(0x10, 0x80002, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect$netlink(r0, &(0x7f0000000140)=@proc, 0x3) 00:28:01 executing program 0: clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='\x00', 0x480840, 0x18) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000100)={{{@in=@loopback, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000240)={@rand_addr="18d40eab91a62485db6318dab04e4a0d", 0x33, r1}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x81, 0x3, 0x8, 0x1000, 0x1ff, 0x10001}) ioprio_get$uid(0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) r3 = fcntl$dupfd(0xffffffffffffff9c, 0x0, r2) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000000)={0x281, 0x3}) 00:28:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000180)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@gettclass={0x24, 0x2a, 0x0, 0x70bd29, 0x25dfdbfe, {0x0, r1, {0x0, 0xffff}, {0xfff7, 0xfff7}, {0xffff, 0xc}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x100000024000000}, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/66, 0x42}, {&(0x7f0000001a80)=""/4096, 0x1000}], 0x2}, 0x0) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x42, 0x105}, 0x14}}, 0x0) 00:28:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x4) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040)=0x2, 0x4) getsockopt$netlink(r0, 0x10e, 0x1, &(0x7f0000000080)=""/198, &(0x7f0000000180)=0xc6) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x5a}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000002c0)={0x400, 0x0, 0x8000, 0x9, 0xfffffffffffffff7, 0x83cd, 0x8, 0xfffffffeffffffff, r1}, &(0x7f0000000300)=0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0x50, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400)=r3, 0x4) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000440)={0x6, 0x8}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={0x0, r0, 0x0, 0x20, &(0x7f0000000480)='wlan1\x06))}eth1Bvboxnet1[^trusted\x00', r3}, 0x30) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000500)=r4) r5 = accept4(r0, &(0x7f0000000600)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000680)=0x80, 0x80000) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000006c0)={@mcast1, 0xf, r6}) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)=r3, 0x4) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) io_setup(0x5, &(0x7f0000000740)=0x0) io_cancel(r8, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x2, 0x6, r7, &(0x7f0000000780)="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", 0x1000, 0x7, 0x0, 0x3, r0}, &(0x7f00000017c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001800)={@rand_addr="98e27a24aabf0cdc5f15882826b79cba", 0x9, 0x3, 0x0, 0x6, 0xce00}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000001840)={r2, 0xfffffffffffffff9, 0x30}, 0xc) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000001880)=""/52) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f00000018c0)={0x4, 0x7fff}) signalfd(r0, &(0x7f0000001900), 0x8) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000001940)=0x2b49, 0x4) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) sendmsg$nl_generic(r5, &(0x7f0000001b80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001b40)={&(0x7f00000019c0)={0x16c, 0x24, 0x0, 0x70bd2b, 0x80000001, {0x1b}, [@typed={0x14, 0x5f, @ipv6=@remote}, @nested={0x6c, 0x45, [@typed={0x8, 0x1f, @pid=r4}, @generic="28966c8e3f4af88a21c1288b71c9f762925688b5e6b9fce98144b9", @typed={0x8, 0x1d, @pid=r4}, @generic="5216b557ef86641ea6085ff3db573b9f097be8b3275130ad525ed57a58134c19a83ea73b0195be6975fdb5b0ebbcea7b72a8cda9e576d4db5d57b4"]}, @nested={0xd8, 0xf, [@generic="88d773cabf505aea7a9a05a7784291480c2a727e6291daa5e17752d03185dd5f72ceeb017d316983e8ea3bd0ecbfb35d68b6d3625b4f2a86c11dfe59bf557ca81bd9a6728f64af793be93c1184f261c2bcfff5364dc16f2065d6c2bc0b0f5936df326e8fe3a9405d551852c03aa2601a0b212ec973cd439d18089467a3b41f95d205f6b578028e9624797722f6b6fa743ed6875108e00a30fcb3d1375209183c9f5ac795bc49c5f1e81a0eff29ee891c38f88d9347d269030771d2bb37a48863d996d9392d86464cff8899c86290173d54e7"]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000001bc0)='wlan1\x06))}eth1Bvboxnet1[^trusted\x00') setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000001c00)={r2, 0x0, 0xb, 0x101, 0x5, 0x40}, 0x14) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x80000000) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000001c80)={0x0, 0x9e2, 0x0, [], &(0x7f0000001c40)=0x6}) fchmod(r7, 0x40) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000001cc0), &(0x7f0000001d00)=0x40) 00:28:01 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x9, 0x28082) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000200)={0x200, 0x6}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000001c0)={r0}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x6, 0x1, [0x7032]}, &(0x7f0000000240)=0xa) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000002c0)={0x5, 0xb413, 0x0, 0x8, 0x9, 0x6, 0x8000, 0xfffffffffffffffc, r3}, 0x20) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x1e99}, 0x10) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000300)=0x6) setsockopt$inet_mreq(r4, 0x0, 0x17, &(0x7f0000000140)={@rand_addr=0x8}, 0x8) 00:28:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="736563756974712e726164696f2300baf9b14fc1c3311c8fd67cb00a02b47a453bed7c918464028da2d907dc4a94b7838977fa7110dc948bbb53853c2c272448ddc2ea82731c0d82a758310425bbf67f87a45664415f5554aff7696cbd72701e8286e020127da3e0fb4e58e406534b1938966582f95a64be96f97daa442424f4c45400000000000000ec0000000000000515182ec5c8cb492b60c18a7b5d7ef88d547065d0e0e46fc637e6d78954a5cf7a7d90541f7e2b7c"], &(0x7f00000000c0)='/dev/swradio#\x00', 0xe, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x501000, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) kexec_load(0xfffffffffffffffd, 0x3, &(0x7f0000000280)=[{&(0x7f0000000140)="b9533a179c9be6ead38556d71fdac8b845b3130a77b19beabf4ccc9c9e6fe2943a5d5d6fc123c653398abc08eca0685054b8bf2c673b45c72c0b42101177ef8a482bbf3471d7e727be3ae4feb4b38a91125c181873e249fd83cf", 0x5a, 0xe, 0x4}, {&(0x7f00000001c0)="451212f1de6845747686bee741dd8b34163575d3f63b85d21fe2fbb64088b8b22955732360bbf467d043c78e633ad15a92a1efc908c7fff2771204fbff36859a71f7eced06280c2b23d5fd3aea58272bb6387947bf380701a4929cbd457669ae3feade85", 0x64, 0x9, 0x3ff}, {&(0x7f0000000240)="016335aa86b398cadd7f88897fca82da3e8dcf991d015ed3f0ee", 0x1a, 0x9, 0x2}], 0x3e0000) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0xfffffff, 0x0, 0x0, [], 0x0}) 00:28:01 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x866b6c2b2a8c55b8) connect$unix(r2, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) [ 326.959960] IPVS: ftp: loaded support on port[0] = 21 [ 327.129267] chnl_net:caif_netlink_parms(): no params data found [ 327.232862] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.239431] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.248131] device bridge_slave_0 entered promiscuous mode [ 327.268656] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.275287] bridge0: port 2(bridge_slave_1) entered disabled state 00:28:02 executing program 0: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x46, "c7c0151bcc91cebfe26c2f0bdecdcc813c82ba672dbefe5f91a76888c160e4287e2fb80c3ce6e92b8dbdafe09c2f7e3881528699651efdf2d12c1874e166d97860c52641899b"}, &(0x7f00000000c0)=0x4e) bind$alg(r0, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r1, 0x7, 0x2, 0xb0e6, 0x6, 0x401}, &(0x7f0000000180)=0x14) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c0045007, 0x0) [ 327.283757] device bridge_slave_1 entered promiscuous mode [ 327.336890] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 327.348756] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 327.395031] team0: Port device team_slave_0 added [ 327.404086] team0: Port device team_slave_1 added 00:28:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x4, 0x400000) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="030000dffffedcef7901"], &(0x7f0000000200)=0xa) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000300)={'irlan0\x00', {0x2, 0x4e23, @local}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'os2.', '\x00'}, &(0x7f0000000240)=""/112, 0x70) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="1ecf"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000080)={0x3, 0x31, "fb9ae6165942bd726ca9a936a085ba06490648d49ea0d126fe561e6704a50fe3bd9ba7e13e91dfea343bca8088eece4102"}) [ 327.487855] device hsr_slave_0 entered promiscuous mode [ 327.545971] device hsr_slave_1 entered promiscuous mode [ 327.603743] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 327.609656] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.625219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.632465] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.639108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.756518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.800087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 327.836246] bridge0: port 1(bridge_slave_0) entered disabled state 00:28:02 executing program 0: r0 = socket(0x200001000000011, 0x3, 0x8) sendmmsg(r0, &(0x7f00000056c0)=[{{&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @multicast1}, 0x4, 0x3, 0x3, 0x4}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)="a9f260308d327335c3716201bf66ae520d178af75490155772fcf54fd91b20894260ad9335994ed0437b435cc9f9a72faecc83ccdaede36ca91967859e07fd06cbe4885fe013bd819520", 0x4a}], 0x1, &(0x7f0000000340)=[{0x30, 0x0, 0x1f, "fb1d3695837a7e8f080103974dd0da27e03dff5c5c94bd5c3ec1c445b6"}, {0x80, 0x112, 0x6, "340a0476d112d382d275ae57c5f09fb22eeff3371b0388e5b23bf5c56613770299e50bf6ec44c7606fa683d44a1a59c742e7bb8f637c38551535b71bac852c52229ff68f5df0567e1f2c4bfccfbd4ab6f9c2426578e72ecc4d6d91f772fe7bbcda9f9f51933b472496563e59"}, {0xe0, 0x11f, 0x200, "907b4b0997f4b3737e28dc662f15ed0e6c28973b97a06aa5a40324dc728e29ca45f2d59c924caa28d43b4ca06fe861565cc6c17b009c84886c33fbf5f6507f47560c9afc7f690130897822cd72f6a8ff4bbadbb39fb7846f9010a6c2c369a919bd73795df3fa541abb0811dcc359b7346fc732bebc508ac385d8dda0a36874cf31464742a46b3f5258031f005624a0aa0c706d26e8fd856f4c4938f62345d8ba75904e2573abf1cdcc01c944fdf21c8c2aa211ca503ee88c706b32d9b130a11b6f8f3287f296a1c6b4e3"}, {0x80, 0x105, 0x1f, "1a050cdb86b54cd463a67e6aa48e79de0d9c431792be23a739a9a6bf75556f198ccd4c8097376325e756858c2170ca74bbf42784cb13bb9f5f2bd5d3b95d5a0202995457d20126c409522ea9fb0965d5ef5b3d4e232b8679673b1e8b315b7a1a1d61f3952dec8ededa89"}, {0x50, 0x0, 0xb1, "4592930720856b3a5a7f61bcdb87ce1975b95059366efe8cd57c3fcf188271d650f6dddedd2ed57b1d5aa9a727d3920930546f0ea76cbc8197d8711306e585"}, {0xb0, 0x105, 0x5, "136f002587ecdb44080d5325d8f3c4effa8b3a30d197d73603594f96a37a4891cd13c94e836589c6b73a8848d9a74ecbbc7794726ec926820bc8fbad8e8ee38754fd0476a86fd91ad533c3cc3646990970751f7bddee59381f4a12fe435b4340a7cd00d35f1b1aa4d6e22e6f0dd3ed5709ff97c438c45f97d2cb6a2bd0a77a380c5c77838b000469d1d416468158e6af7da1f828b248297f45f1544ffe66"}, {0x108, 0x13f, 0xfff, "32908aad1855babdb387d07410253518e20acd040e9708be662199e5705c23826c8e032e0ef2e0e5b8eefe2e62c8bd82cdaa962d3f22e3d23c5fe3647ac022d0b2cb68c7c7837de2747402f192aacbd569e7bc1e1c60de4602db7cc055840d50aca8080d0dcf9ce722f3f9e3844353c72fd978ab485f8a9ce0f394018050c1ccc9f397749cab891bdb2b47bf41fb2601ba0696f8d88f4150711212329b513c0e43f033fa23d9ad012477fe937ac5e1a331f31f431f78bcbe5871013431f294da6024b707350e73cec9175c0e373101853f395d11d5e3796aca9deaf500b2425a9db3c33d1cfec13fa1a63005903f00102d9b1d9450ca82ae"}], 0x418}, 0x10001}, {{&(0x7f0000000780)=@l2={0x1f, 0x3f, {0x1, 0x7, 0x8, 0x15, 0x0, 0xb2}, 0x8, 0x101}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000002c0)="eb5e30118c353c8aef24f36b1bec2bc9b3fc022f7e2020608a6adee2fb405ce427e2e2e5e471", 0x26}, {&(0x7f00000015c0)="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", 0x1000}, {&(0x7f0000000800)="8a3a574e561039dc2865b352908d7536a03f85bb5b341c6bada317ef295f9df6ae55a4d186a9605fcd37ac3f5d5b9f43677850e7c9904cd9dd6c74666b742cb0cd2279fde7a91d280c4247377dbc08fc2b4a2b999c334dc09a4db347ef6606b0a93a149cf2c2017977958e94a93edd532a2b8770caefbd5017838844aff2d542f9f1b79fd0ea61b079c9c7b9eb3ee64155926c21e098d0c8da2ca08f45f1b5b06f7e5aa465c830994061478863890f4d38d953a3b397a1ac593bfdc068a37ebac3045f41bae5217e273fcba04a893ec7d7d3bb4f653576dc3a49af7cb6e6257a92ad85872708dab08fa96b50023e76a130e9926bdd1b", 0xf6}, {&(0x7f0000000900)="b448363939f038f81ef8c49c2a268ec565e1d61887962efbc4b402f8dd3bd4c1fd27ac30be602b88f36c9e26a7fa0532e49b1c8906e162a2547d887f9d8fb1b7de8419d399bea7d4125677fade36da2664014e8c5e0bd9bac2b430e4fffb246bb36ee0ce9f3651bf4e", 0x69}, {&(0x7f0000000980)="0b42e7c5dc38179af0e7880f333ce6efc27ebcc51fb4d49650d81075ca2442334c194af2b85da3df34dc3277e270b2a9f312a99d635a0e185b4368ffebc8dec2fc44a465cba375ca68eb1bcef00c65ec72ff50046cf90e7764ef4f5b395304ae99127cd49b830b2d382d75c279e2190527dda80d604ca625182561f12372b2adbf399b", 0x83}, {&(0x7f0000000a40)="8672e2db49894ac5ed057db4a5", 0xd}], 0x6, &(0x7f0000000b00)=[{0xa8, 0xff, 0x8000, "445ff7c6903b803d7d2c59676bbb0f2c97972b0d7fabd64c41d74aea821deb19c0f2eadfa71f6d4d161ebd743344a5ce3e4debca2e4ac588894cea6114d8223970e9f4bf0c1c9feb70fa2d1f87b91726fa23767a9c9a292c55951411100b411edb248a1e06ff6d43d6d690440936b59f76f08addcc617737e695ddb305c38f4f224bf3725e123036934088c6b2eed27f26"}, {0x10, 0x29, 0x2}, {0xe8, 0x115, 0xdd4, "ca20586eb32a8565110fbddff2181393dcd0199555e28cff28edec77e69201a34c54b8197be3aa1df36ce929005ddf32fe037b27667a19b30467d75771d41a37e50c597bf45e44534b7d8813c88017527727924ac7e4ee2ab63516f50715995fb8592afb09cc1447a9543e9d9bf486f9dffff84131b9a826a030aabed7f7adc935151418aa0639e75361f5fa3b9a5c5e0592c7a9cb43fc5a4d807ecef6571a31893c2ab9357cccf1f4ca38d99e3cf546559023681926e323e43eb4bf885750b422c05b515ac91409e97cf39d21b1cb36bece6f5fc9fde330"}, {0x50, 0x11b, 0x6, "84601f00da29788c31abeedd6852df3daccc095a4c5bb7b5ac2724e69f6c0921c55757eb87d25ac46977007217bc8eab087054f782bb2a30ad83c3"}, {0x78, 0x187, 0x80, "98f325652ee4a026de6a0cb6dce25d00bf66db35f209d72cc2a6161074bacce2329328745867bc3d074f8f22eddf6bf6e1bb6343613bd449da9db6861a62012310c3a7a985355cd0c3e0bcd012391e00b4310d74bbba14d2ad4d7ed9b81e239ed3e25b77053b1d"}, {0xf0, 0x117, 0x200, "51f3903102d701264ddff286650d4c6ba42ac88e7f83382a2f9f2e787684d3bd7cd084e2f3507bd6e0cd080327016397a53bdce6ff22a96edd7dc9d03883d4ec2dd4fd4188fe1cfc90730371bfdef1a484eafe325ebed008f59936942b1d1ce80b87d99955d3c72cd0c7f852dfd87cb9fbb07d1562e3337b76a5d85a32ad4ed7035bc6c460a7e7448160888ca7e56a5935dcce5558cbe3f29d24f5ad97ce8766edf4968ef95d90036c42022618cc4b858ae2e92f8889c235fc5955a4ad53eb972783ec214e160c6f1406f2fed3b1d4f89943c7d372c7892e6cad63a4"}], 0x358}}, {{&(0x7f0000000e80)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x3, 0x2, 0x0, {0xa, 0x4e23, 0x3785, @mcast1, 0x2}}}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000f00)="2d6278513ebf374874713f1037d3c1d6c524262757757c15ef3678aa8324fb3aadd87bd1393c167b41ab75c4396118a4aa77d927d6cb4b7db770d1588f097deaf3e88e35fafb08aad900b7ef2728f7a9a7318f7ceabc418402316bfd7d948887b42818ac749f33cd14c4c486feded6d09d27710e18011dada1003ef6a20f4c9019a85addf4007ff343901853b577cbbd1c16b0275886abefb9cd32425b02b8dd5f23f8ae4d3cb2ebf19404ae86df754907561ebf1cadc60254b52ef492a30d8f2b3f37a082970afdc12b0c439518713bc50714fb9896caaba5c58fbee4d1e5a6c82e70d8b7d9ec9f3db162966eed259a90176f6ceeac53", 0xf7}, {&(0x7f0000001000)="a186bf94871d7f304d7a57fb3a3466787fbb599ebe08592f868815e669bd7ed14102f1f3a4d40fe3", 0x28}, {&(0x7f00000025c0)="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", 0x1000}], 0x3, &(0x7f0000001080)=[{0xe0, 0x88, 0x1, "94c3bf27e822356c4fe9e680bdc43c69cd17dc2609d9d429c93e6abf79ac9a39778aad9403d2dda804c461082fadde3853c21758ef98140c09d8daa2bec8ce05c935065486c26955fee72a7ef68b049fe1377e91d81903bdd29eebf8689d2e98f9ee9fc8f8d86e6a00cf43253b69b0d49a20a8b88d012ca9bbcbb36f5dfb0e984c6f7460bee11cbf0c3d100ebad525bdcb01d05019089d11120308dfbff64aa051c3e1cbd1aa2e1bdb0fa15758bc2ca1fca341f17f91dbbdc861d0a3e61a9f3d31234e65cacf873c9aca8e"}, {0x28, 0x29, 0x8, "42111d4bfd55c56294b47e05819ec808f00751d00d0cd5d4"}], 0x108}, 0x6}, {{&(0x7f00000011c0)=@in={0x2, 0x4e23, @rand_addr=0x2}, 0x80, &(0x7f0000001240)=[{&(0x7f00000035c0)="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", 0x1000}], 0x1, &(0x7f0000001280)=[{0xd0, 0x116, 0x3, "4b43ee6b2fa811acb3fd2f302a6cc0e31a07fe3f00f363d97eb87aec2654a8c9bec81cdac8f02a7dfb44b26b87bcff2296149a20a1866c4783d355c91a7ce2cd3a468b16ab377cb4eba4ff848c1f3509368eabe32dce6b5afccc621a77b3e21af63fca95d4f3f46bd5ba04fed32fc2263696ec5b4153b7b2aeba786b9280e643e4d2a9d447177a9a9457c0f65cc9dc5e1e23b04c43c1ab8549180185dacf28fa7758256eb775cbe60e19f22796f0db72673a0684554b7a4b532566bdf766caf6"}], 0xd0}, 0x1f}, {{&(0x7f0000001380)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xffffffffffffffc0}}, 0x80, &(0x7f0000001500)=[{&(0x7f00000045c0)="c31eb5586c2d8adeeb080d539c53333ff05a4edf0ea7da043febee59e5277da4570c185b78e755ea52c9c5d9a86c086b3a9916dc7b3428a3e292cf74b654d74efc2abaf910548a95e75fc1859f95d979c98ce37459e9a7a1bee552b2124f8ad718c09ee434d9f998ad273f56a2953cba474864a9903e74fcaee8cb2a853702267998d4f5e483749bab398c62f2fb7451029a397363bce80bbc4cee7d89ac49f13dcf738be89356a01ee574b0b8a6e2b9fb8bfd5c9c932532d50591a99b3fcdc5279af4dbde48a0ef4f39dacbbafe56e395a4a5b63f554417986c46d5dd0005b705b277d16dab6ab0430ae1f8cb526e38d1f83698be211146c69e764f8c85a49e84de40aa9f5e3322426d2b73e417f477fd95b947ea213532fbecac359b831dd88e652fb61ad150e72deacccff496f78383496c59e08550e08b3eb39748268d9e64c68c05f7bfb32a7ffd504fcd7f942c4cadfe94b46916a52a7dcfe7e98039194f645d2dfeb2f9f1dc47839488ec0fd51b062ccd8d4585ac95dc5869c3627856c24587649df417f3b528d4f27f2e00c0ee96739de60f0070e05da5131ff11e0b659cbbdbf9d0046cdf121509fa6c798438c8e51fc2654841441d6900cfeeb01948a66e2a2a07ee22ff3720095d7e5ac405f22fc9cfd3b476a95338aefa7c258d7a8200e70af608f2d210d7d956c444ea89af86bee9e845ff0803003dc2a7b08d5b81457a5a69a65b5fc824501eb4801cf7a94df8206a44423b3594c163bf895bb2031a0f93646d895861aaa39c667a1de38beacbd2f5ca5e243e863c76757ab9ad912330bc4f31996d23249cf77efe9ef117c4a5ed484c579fabe3913dd1bf584b02066bc13e4702ad37d16b3a1cbf29739d446bd5d9b739dccba169bc069167e23362a4b5e22fd8755ab500d5cbcdb3f0d9220398c597fa85849c8b47567dfdeaa98f84f270a5e8cfa1e344a9f86ae797491014c5a172c25232c5285984449244d6ad1af8bbfdf56983740c960ba8f761ac50ff699e049c0bcb62a5405fa4d45ddae8144c436e5fb036b62aa96fcd2727b3f563a4f302c53ec08d6185a0b681bafd3a6f523f8863e47cb3b8e3a461ab1858dee10e7f9b7c61f072bf90ec7aa8b6eb852c41c05a937b16004fc0b9a31f0057ba5965d77c05f59e3688a3a11d80cf5a5d58773da50d680637528fe4ae4cb1e42ae151cd95f737e372b0229c1d837d32c26403216a8fc5cb1fc7a83148bdee0449f08cf67042ee5a6d6def58f54e8fa3545e3d26c1e523a99a95ffb48a14b14e8d422a06c3bb1628f2fe27626a327a7cde1ac24cf017f7d6d46a0bdb83caabe93d43ed0815cf669f88cdc5e212ba4cf5760fc7be924e09d6c64e1568595f9870a43b5f7e6892d2c1ec386e0e626b3de911edf38191b9c5e0bde1d44020936ad078ce234db34fbd554ad51cc77a33c4e38fee33a85fe2d754ca87cefe24ee4a9f1cfdd49a81cc814e7d83a693bda952878308e9fca29bb481f9cf3eeab07f9ae6b555fff53703e7b4c5fbcbe5471da1003fc5506dca4e15cd788d4ce88ca72f56194641bd3cae116843f9f940720acef65f844bf828f5bf5b349165a2b8142dca2ae3cf4863a6c4598d8287318dfac10814dc55fa80c8a398fd09d36975d9d97a6f27530884e623a9e5100b7a6e38a5d47e49915b9f31de3bc5e97d25015b493e22cc620fa390c3da67113bca34ceccb154ff81340ac307370bc3e9850c865790614ce97ef76f19ab3f8355a6d03c93fa15591e8f57deed88c2c2043cc253445fecaab38a7b173d626c0437513e0b3dfa546a3fc93583f0a19af3cd87af127cd5f85490a56bb2149c7c230b129169c5f8ba14b9d28feb50f65a138f4f8b1e56a286eca7ed99ad6616263a2fe3be0d5a82fa01986e55e73a9ddf6e6a990d6fd19663e3b85232090ea32efd2d036a46a46ac56b85c921212ac521279d5bec8b62acd86d04e7748ae6311bc47de04a6f00b2f66ba329dcdfbdc5a94d3c2a508d527c6179b4d1ff7667da21a1aaf1e9453336d2e764f915ecec5afc74f5b9c71f1cd0b6cf172753d71450ece8869aa87e8d0ba326edcc9e685be2a21043848822d316a1e1f5f276f91d74a4fa1cdfd39c29acee9e72aa631b18b3403f37dfba818a203d3f60e24a6d07e086e9256e6e3ccf2279aff6a4a172ee12cc77e0ba1be9f57a3d417355999b22796e5fd6df41fb07f3e5bf1222f37588daea918c657229d969331a93226561ac3c2ec922f1bbc8076790796e39a65e8e23f8fb7a507628ded2511e4f4cbd123c8472fb36e5ccd1526085978c1834095ed92bfcfc52f1b4e6c1689a050796a270a748c8ba5a043e12e6b4c169a682290bdf0159ae2e5fe555b507f660db2dc39482c075338348f28d9141b2e67e1f1543df676e893798199c4c7c14a4a1a726552f53f5b467c395167b5401c8401c123348e1518b3eaed648b7ee726e517363c2e8642a42d07f492be7f3f6db76ba1a921a7d786491b8ac1699d342a7f69186c5fdc34bbaa5186055086ace9bff1329a9ccca030e26cab77bf2efdbbe9934654d552308421489e89a4979bf767e18a0d32e3d58e4e265998b693fce3d0a910d20c85d3f385ca20524eec351a9ea0052e96fff3305e445ff27f4124304e951e4c0fa282f4cb85bb322333c90e785d0aeb4d6774082e5f749a64ab5153df7ca48a6dafc370f8dbbb6ada0d6216d95f2e698cabbd81745795ae098d35cae0354e9403219303c6c3cb96750b7a065b6c2676073f12b0e41f31988f175fa0518882eb871dd9571f37e3d8361b802ddc5c3d2ec7656f151a0f22641eee959e93cca02444e0c5f31d6aeaf883f23929b4b3031286b36a155925dd1c58d61a7c8dbec22f4b3bc286a4ed7ece2e980373cbce37de0c172b80481c535300cd881f5eed6277995b5509eb7a558c31e18dca85d029047f066668dca375dfe3b2b6fb2ed77361578285937b77e8f457a08b179a025aac06008951ff2dd2c26612e2333f4580732705824a173201522a1a308e8a65b3ff68d7109ea68a1502e6075b0e68121f32822354e1fc4e0ff3c8c0ac738316c5323906c889d81b79520e0bb6943d2f69f23c793ddcad30e81c1701241965461e20d382d9480b3951a8cb96e07ed22c9feebd36e2710db12457a0d8801123922e607e46ed9e862a865feebfcbe097468337a343e114c55df040cf6af53006b66d5e245a8ba8d91bb04649036846dc90ec5b3e9e16a259d85eb63063f4726e7f02f015c214560036773395ffd25d9e4e339ad34b72720c817dbb0840ea0c1120109705be7408f4d8ded10b290872e1cc0c478ac1aa8360c136245f13207e66c07095193f18debf064952818bcafa80a27eba884abc23b375233349030c923461d01d4fc73674b6b2b9b07117d61a21c0ba9951996b41e74513c9aa820eb2eff21f421657a1a31855d6b687b5a47d2c93e8c1b81d0a4e53f86dc84e33264534324e00e23fa99c10fd33575d3b4162ae73922dd35677a4ddc67b84ec84a568cbdd17dd56313f10c0724b9902f23c5f8dd82c8c1041b7d67a3195505d40d6953fc5b01fe350d5657c5afbf9de0525e565455a607fc76e527ca4b23541c319b3a30306f38a414efab18b70dddd8004460ae16a9a1def29239de40ebd5f162dbea9cb6cfb0032508c812ee58ca9adef7dd8b1445587cbb19163dfc162d33452cd25f4de930af4d6f3a94ded8efa699fbe2d28ffcbd0dbc5bdbc2dc477ea950f96c8c8808ac1a3db044006c823f0d1225b8f96e9797894d121ef0c4efb91fee25bea4ad5299fb80237e55d14f78c617d2d8a635376c4abfb1d2af14a2e5712dd4e8f874ffec2317f097c36bac3eb2076659ac4b575066489c0de224f5d719dc9cbc86262faf4f3e52e2ef2d9618c37930d7adb1f99f0bb132b5ed0760459af75bf66430a6592d8db8fe1e383a36c13e513b4a9b7ec89112d72965477130b022e9b3b73762de3591f699bce5d7dcc3231ebd032f1c42a7cc25cbbd5e311b65d9137e82941e8d0fb8daf5e2433fd7d1af6b4f53d03004ef15715da717fb4e7aedde634361f78a013749abd14161a763b7b2f6e12401d31119730dc08041df2fedbfe3d3029059de531d5f433515a67bce2add4fc6353c63425e795bdc1d074daed338b903def37fc9dc5facded4a14aa71d427f6925feb3a3b73091b81641abcdfd3fe0af87cb5ed7aaa136453dbba220d6df0fe31c8398e65228eaf6a03d6e7c2aac77ae1f54c4cd9308397d2b07547b7eb9c82fbb4946035cc7332cc83e39aea730f9a2d25f1926e2b8125870dca0e2c92535f14b2829d272f784fbbc1d68269294602aa9a2c32bd4e6fc9bbd45e5c74dd0ecda149846afded3017433a0271ab0dc8f80047f5598d92cf077ef603f2bd1f0014a5622a98c1f7e0f374914e53b0368aa54ce6511456d370d67b5dca1d84332b8e969f300e75e13f6f5967dd9fff1e326505ca6e701c48bc4cd5d1ae0734e6ef97da36f4b718cfc9f2f0a070957b9c6941f7639626b0a7167b3a6b7e6458b5f4dfe5c5bae98e0195bc30c07e677797c8f6999d54b23de4c0e6aa8bddaa6b0d0cedc6c9588b9b26c7e7dc3e70b9b8c6367188f36c1492b53946d35ad4f9434241b0e45a8a1d6ec84cc28374bf67a3a22661ac8b7c96a81b29883a48e560c874d65310f1d1ecbf892cdb53ee10a74cbc19934dd6f3f196a356231396f25ce7f3edfb87a10ea6038b60af272d6218184d3f71c8a64d69992ce00978df61958f15d8e881f1030884ec63450bd89589a223620a7a383af618a3eb7496e0b5236774d03291d6078e86fd27e7e9865fe8a8bfb6a1ac89e85f7801af8ced159a1f7bdf412439203720dcd82eaf5e9c3f4f3f1d003170ab22825676e40df07dcb775a60c96c423654fd3c9b288630221a4c4a8cfc144895e92f744b25bbd6b70be996d5aa0903cabeebf309ecc504ad7aa9a8983d25f354be8a519f6a294243fb53579dc299d54f3781fc2862fb275835c23cced28f901c4727e369963a0ca81f214bcb98c8c187c5a819a136bafc44f5c544b67fdedfd6df4c96d2ed70b70e002e053dba5b5b876559241542b036ea7eb4f7bf6ecff0d3fde7e68723336fac752a03b4c03b365d0673360c6fac8d6c7a5c188ebff60e739361341611fa42d5d6c21bf57276cd0cd5621580f397467d631e4cbd777adcbe18b4ccf6c6e3cc37d2c4b5a78d57fb20e4d63cb828f2b6ff97351d44c7517c2e89c4b39bdfad95628eec5e3f21a5939b33e47a476a68af3ec17badd5061642a35abbc0ad6193e3fa3f9e8f760b92a388945f00a3aa7f13b446fb07c94abfd3724acb34af56c2a6b2a4bf809830075ce81bd75a2b925ac9b2d966ffc0dfb9fd7b65f83902a3ad66a5bc8e88319ec8455af5d5297915d6fa7b0f96c904b232561649f38cda97e136c9ff60c241a446a828527a736ebac9bf27c7c8e43bbf334ec79c081e5d6c261b1be3b2073960531a7af16cb03349a6a82f1418cc2a166cc6a2f3ae9e6f9499e572cd32d0fee1c0e7e06042ea50e165d8637d237e3598c05db0fe6c157bb4172e38ca5b022ab90f2bdb641c402da5fe013e5feb01f52945fe389a7e032cb1a1d22885165af62d49427f371eb116e0db763aec311fc039abedde915c9865bbf149545238e07e07a7ec5a21e1a8f8955b2a33d2d85e3617b81c8bd81c60b0209794bdc3c2ca58ed83d01a931793535eb55ed5f1d3dc90c9a0b28f6a724e4e2982c8853a23c7b93d11f05268a2836198d3df7", 0x1000}, {&(0x7f0000001400)="b7445d75e2e7a6a105f34fc9df664a67c731dc5fd15023d0d699f9c8eb17397f8ff7797ab66b2b409dd87fd0daa8b2f56b6c58472865998207148937e50de1080e9b9006f61a2d4c6566d464ec7505fd464f2d7f48c4b1d4fc51a80eeeb3811e950ddb1a7c72cf715d7c19873e88172612", 0x71}, {&(0x7f0000001480)="7b31a1281683bfb01acfdb20a70faa9d319b34a936361159a765853afc2205fa2f4abd07a62c94f0e4c84ad950afc3bccd5d06b24c30123b15cfd08369236f6a8b340b6e", 0x44}, {&(0x7f00000055c0)="26ebc62aee667f8d465f50eeed87fdc6182fd08988fdb8e02d8f16214c489b2e7872be2e11781aa59a269ef56b372f0e417edc25012fe466d4bf673e4b9a8b6c8b199f0d7f8ddcf8fc55b0e295ff5057cde0f1f716d1716f96ff28d8b1dcace48a0e4f16c6fc722f13837e036ec542c465f336104202906c48fb73e0cdf9c3851bfe7117ae02660c30fe87e82aac42ebf392aef56422fa20e5b6546dc5dec2d67c15e6e2954869748fe4e8fd7e7e7b6415ade4bfa538d9775e9fa31a055c09170b03ba175be205bdfabe3cb286ffd8", 0xcf}], 0x4}, 0x3}], 0x5, 0x4000000) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x84040, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000000c0)={0x4003, 0x86fa, 0x814, 0x6}) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100)={0x80000000, 0x0, 0x4, 0x8}, 0x8) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x3b) writev(r0, &(0x7f0000001580)=[{&(0x7f0000000080)="c7fdbf34b6b1d372180ae9257f46", 0xe}], 0x1) [ 327.854210] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.894899] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 327.976640] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.006783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 328.016528] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.023143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.076955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.085539] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.092126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.102289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 328.111604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 328.124064] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 328.148024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 328.156586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 328.173563] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 328.186060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 00:28:03 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) close(r0) [ 328.195699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 328.204229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 328.246450] 8021q: adding VLAN 0 to HW filter on device batadv0 00:28:03 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80200000006, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000100)={0x0, "cb1723ad6171cdce41b21dab45ac8626b9094d7e945c7f9ba2fd0f6275af10be"}) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8d83, 0x801) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000140)=""/232) 00:28:03 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1ff, 0x8000) ioctl$KDADDIO(r1, 0x4b34, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585605, &(0x7f0000000200)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb, 0xfffffffffffffffc, 0xfffffffffffffffc}}) 00:28:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) r1 = dup(r0) sendto(r1, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:03 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mknod$loop(&(0x7f0000000140)='./control\x00', 0x1020, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./control\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U-', 0x80000000}, 0x28, 0x1) r1 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00007a7000)='./control\x00', 0xa5000960) r3 = open(&(0x7f0000000040)='./control\x00', 0x602, 0x0) syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0xc3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={r0}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r3, 0xc0305302, &(0x7f00000001c0)={0x4, 0x5c, 0x100000000, 0x9, 0x80, 0x8}) syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x4, 0x802) 00:28:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) r1 = dup(r0) sendto(r1, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:04 executing program 0: r0 = socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001640), 0x4) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001a40)=""/4096, 0xffe6}], 0x1}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="58beba9b880fca7e505efdeb48b2376c7b94cc9eb2368d0950e6389709e23734db3f30f5a9feba9f9ed68a67a3873ab49143e928dae9cc218a0e193deb3aa47c1b9a0be6e9ca4c838fb11d5b4494a3e6314a4c27d940863f83687dcbdf8c470f", 0x60}, {&(0x7f0000000080)="80ad539c194b9d748d37097c2a944ad538eb80fc41c0c6574475352d78c9420a8576818bc8fb2b9494ed4eba0e8d61526fe56d31cb94967393587a824e74cd367fe25e98ee965bf4d6fb6fd7ceb2202f69b2f2178ee912a3beb6725bfc7ded31501c1d09ad7c213b6f3ad0dbc2391eaf6e9b0760d4fac8f11e18166f2ba50ed11e9db89a04fa264a1cf6384cc4e3767e16dcdd36863e2a67e009fa4fa1", 0x9d}, {&(0x7f0000000240)="7b63f8d963ca64b2e9d46b4b6d48826bfd867ca27973b480f80c2e698bd940728e742f4c73ebe52fa10c99c6203159bdab59bfac9e5f440f64de0127ddce97a0f340e6ed8738e5f11ffbe6f8e02fa299e3cb5a39a272de68ca9c96e1eb4e69281dc86d8a6f31cc44e0bb4fb6b243183f8d4b9970530ea565e24b78cc4fb7400b38c684f3e44875a24d6dc0af9f6e2b6c24b72a341b3f48c58a06394a5b237f2a394dbf6b5f4c3d7005ab1d31ba45c7e59937335f5c1274cf4185c8fd6e58baf9745023e25a7c0a176e60fa302f2d42948cef1eef46db918143caf86f", 0xdc}], 0x3, &(0x7f0000000740)=[{0x100, 0x11b, 0x89e, "1989c2b744cc1fe480b67c1fcc26f601bc1d1a2eaf8ea147f91879047c9e39f1386f476e6b70667a115da78770e6c1d41d67c6a67d697f5498215e00680ffbc6814cf9a01a2a12acc194ac546a5279cfd9057235efa9ed9402afe1c1b80ccbf1c187757dcd329aa337baae2c6ce146519fea3e22f396d8890170cab17dd4035c801a08da545576da5569634dc3f38491f1740de98c05390f2a990c086a862d5e92a069e52293a57df362b28e87123dcb3a791156ef04adc3cd5da4091faa207ba66fa60379d4ffefc8c9095091f32ca6f9e24793ecd44cabf98702064b02f392b92ef2e5f44d65a320d34f8ca38e72f9"}, {0xa8, 0x195, 0x6, "8506fdb1e01a2371a262a705be6899b8949fdebe5009a515dcbbb540758c788ea3f5a822eb86cc21c71c8a5a9dd63077d79bb7de6abf638b751ee29b4dcce1574ca9fbf2cdd662aede3d791d89407616d83aa1d5536a9658b52f0cd30cb0a38db6175d45571c4e1226302bbe6a8febbb07ad76899e02d875a6966508eaa48397b84e8fd30be7c49e960f4c3e8169d6dfe65f"}, {0xf8, 0x11a, 0xffffffffffffff81, "8a13b6eaae1f67a939a4985439feeb0a9163fcf53394a9cc0f1ade63e581ad747ff36d6ed45dddb028a720a2362740a001966ee5ce8d6e70044331bb0caac4a047a56fbe3970932c5d285b515e694d7f1851aad3c466b96ae732ad18c320bd4d532ee125df5c7f354196253336fa2da8dce12a7cdb1968e2dd02aee476c314b6e94ee4a5a4e940d87539cd2a0fb711418c124e621c60d7f003229895710b372aa707c8fa73f6af817abbfa741c9197dac79b36a630d147f9c14d874f5dc751c780c8542b980aaf627899b0c24f2b7dc983b8d37a6086ccdcb36e2a44386e0b89f5f8e6e5d10c"}, {0x80, 0x0, 0xa2e8, "f79ab1652e1eeaa86d9c82d1e6dbade1289693c4a71c4c8bf66dd975c26059ecbc5ce30f1196cda74836fab7f8d68325836bb161dc66b352991111ee8fbbd09357acf6517388b2a8916ce7a415a35e1688eda9e1c4e7df999b1f5a6db725d896e3cc22fc99656d52f55d67d4"}], 0x320}, 0x40000) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000001c0)=@nfc={0x104, 0x2}, 0x80, &(0x7f0000000000), 0x159, &(0x7f00000002c0)}, 0x0) 00:28:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) r1 = dup(r0) sendto(r1, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:05 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) r2 = openat$cgroup_int(r0, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000001c0), 0x12) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000140)=0xe8) r4 = getgid() lchown(&(0x7f0000000080)='./file0\x00', r3, r4) readv(r1, &(0x7f00000002c0), 0x1a5) creat(&(0x7f0000000040)='./file0\x00', 0x80) 00:28:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) r1 = dup(r0) sendto(r1, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffef}, 0x10) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000000c0)='.dead\x00', &(0x7f0000000100)='self!\x00') setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000280)={0x0, 0x2710}, 0x10) sendto$inet6(r0, &(0x7f0000000040)="cd", 0x1, 0x0, &(0x7f0000aa9000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x1000000000000004}, 0x1c) 00:28:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) r1 = dup(r0) sendto(r1, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x10000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0xad2a, 0x0}}], 0x400000000000052, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) ioctl$RTC_UIE_ON(r2, 0x7003) recvfrom(r1, 0x0, 0x0, 0x60, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000080)=[@timestamp, @timestamp, @mss={0x2, 0x1c3}, @window={0x3, 0x1, 0x8}, @timestamp, @mss={0x2, 0x400}, @window={0x3, 0x8b, 0x2}, @sack_perm], 0x8) 00:28:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) dup(r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:06 executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000001c0)={@mcast2, 0x7f, r1}) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020107031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0xffffffffffffffbd}], 0x1}, 0x0) 00:28:06 executing program 0: syz_emit_ethernet(0x1, &(0x7f0000000580)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYRESHEX]]], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0xfffc}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x4400, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)={0xcc, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x6c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x23e}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}]}, @TIPC_NLA_LINK={0x3c, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd8d}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:28:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) dup(r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) [ 331.557744] kvm: emulating exchange as write 00:28:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) dup(r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:06 executing program 0: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000280)={{0x0, 0x2, 0x0, 0x80000001}, 'syz1\x00', 0x55}) r0 = msgget$private(0x0, 0x400) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/99) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz1\x00') 00:28:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:07 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0xfffffffffbfffa14, 0x3a8) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000000)) sigaltstack(&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x0}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000240)={r2, &(0x7f0000000180)=""/151}) 00:28:07 executing program 0: lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x20}, 0x28, 0x1) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00\x00\x00\x00\x80\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000000000000000000000000000000000000000000000000000000000000000000000000000004000000"]}) 00:28:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getcwd(&(0x7f00000000c0)=""/239, 0xef) ioctl(r0, 0x6, &(0x7f0000000040)="0adc1f123c121feaacb535edac3a377c459a18be6c392d733a81e76c32212d66c6d0578fddd61368d8f6c1e60f1efd76b31257b5840f3cb0e70a4bd95df0a045754a20ba8a3dbe8a6ee9f8eeb0e61e5f") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="24000000190007041dfffd946f610500020000001f0000000000080008000f000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 00:28:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) sendto(0xffffffffffffffff, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) [ 332.437741] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 00:28:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) sendto(0xffffffffffffffff, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) sendto(0xffffffffffffffff, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) [ 332.988603] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 00:28:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getcwd(&(0x7f00000000c0)=""/239, 0xef) ioctl(r0, 0x6, &(0x7f0000000040)="0adc1f123c121feaacb535edac3a377c459a18be6c392d733a81e76c32212d66c6d0578fddd61368d8f6c1e60f1efd76b31257b5840f3cb0e70a4bd95df0a045754a20ba8a3dbe8a6ee9f8eeb0e61e5f") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="24000000190007041dfffd946f610500020000001f0000000000080008000f000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 00:28:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) [ 333.168548] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 00:28:08 executing program 0: mknod(&(0x7f0000000200)='./file0\x00', 0x1020, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x95) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2000, 0x0) r1 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000240)="4249da04cbf218950f385870b8b56c4ff46bf186ac95968ea22a58c0be5b8be0590c8820e3568a63300fe7372f5533ba8beeab4a57b30fe5e45899709c0fef88d3c58982529b7add104ebf5d31a47217062a53001a05c50a5fb0ca26740b584c41c999a1caf0d2ae347ed4348100359ebf832791e5e050a5a365d116d56f", 0x7e, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000001c0)={r1, 0x4, 0x5}, &(0x7f00000002c0)={'enc=', 'oaep', ' hash=', {'rmd320\x00'}}, &(0x7f0000000340)="112201eb9306765956bdebcc0df26c4df5a34e12e232087b3ea8b6ed45510883f89b1ce4946e47a7b8d5b3c93b0ca0d3e4695941e868fe2ac241d079533e8a78c9b4d4f8f9a61af69ddb207adc737944434dca9254fcddeb67bd4db98cd4a14c6b13a6d6005ca721b23bd9e38f0abaaf897b93820e254fa72d37c5a0b710b1f5729c0a0a5f70cd13d02436ad2479cecedee01451d8b2fb6a19dc77f152b98f4cc9fc0bbf2dd00b669fdf479377f006f9a547e2522065f311b269a36bb7dd5fac9e74092d8b41040457b2126b95483dcdb79eab4c22e0ce697bc16060d2bc5a7ba13c62803458f3f5b457bb10829f8c31616d", &(0x7f0000000440)=""/250) getxattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=@known='trusted.overlay.redirect\x00', &(0x7f00000005c0)=""/83, 0x53) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x80, 0x0) fallocate(r0, 0x8, 0xff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000900000003000000980300000000000088010000000000000000000088010000c8020000c8020000c8020000c8020000c802000003000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="930000000000000000000000000000000000000000000000000000000000000000000000254e81dcc8953fb0529dea5880"], @ANYBLOB="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"], 0x3f8) close(r2) 00:28:08 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x180, 0x0) r2 = getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) r4 = gettid() r5 = getpid() sendmsg$nl_generic(r1, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000240)={0x4ec, 0x2d, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@generic="ee8cce7abd3b78249b677acf74bb0f29461e7a3c1203cf3dcdd5dbd8eada5140da3373d183f5", @nested={0x25c, 0x5f, [@typed={0xc, 0x4c, @u64=0x8}, @typed={0x8, 0x1d, @pid=r2}, @typed={0x14, 0x7a, @str='/dev/udmabuf\x00'}, @typed={0xf4, 0x21, @binary="31aced46bba951c534834186fcfaba71a7a67d5c1cf4d2644541d6a4e39e2af45c1b6ce9f29fb005056d72676b8749296ee3aabccdf74041475239776b34d689ee900e788c369f4955e045c599f4c9b06ba4eb01fd4214e9ece0e8a679c393a357cc1d8736d5deba50777381ec42457cbd3cc9bc14c6a0e13778aa9788424e9072afef59460d1a63875d6151128eab42bae4d10f64f0b651eb6030ceb479bffb22f49f6fe1e57886727bb759f7080c237329bd76a4eb726b909fa4978dc53311c6cc0b496da8bf42441b39a9d95e3613546e2043db83775021eb36647fb7641a4c1681cb391edb35928a8ad9cc56"}, @typed={0x8, 0x79, @uid=r3}, @typed={0x8, 0x24, @pid=r4}, @typed={0x8, 0x6e, @u32=0x6}, @generic="89a04db8066c4d6e26793f68ad11c49a4273d2272870025a9a", @generic="882399729e6b7ce7402c5a47ecd838d51353826c87ca9d4c7cc2d63a343fcbf9b2953803c874e23f5503b89fd9e2b1761b1cd0abcc75e2f79d38cebf694946280dc21472425f22a80bd961b9d35d1585ea5a8d9824764fe2490368e2f91e88d13789c7b27f56ff844b4f1088aa5dc886bb7b1e33789e3d268a6908ac9f35357c47b056111176aed5fa65a20d79e3bc7db46c10463086b70f854549fe1d", @generic="ebecea2957cdbdef8cacc98a194d1c414409b87816a84613cd75cb3f9bd32d96cb78d43aac5ced0f2e5a0c08f99ff0f9c5fa9a99a5736f7cb36bb9216eab93fe0f2b8da3a379923b6583fe14a58f12b1cbe9558585b3dfa7a2aff00a44cbce44863a96cd75b9c1c77fbc2a5fb9"]}, @nested={0x12c, 0x82, [@generic="18ec1aa0039529fd099694096881850ef3223f335629122f3ef36cdce6679ed79b7170a1927993b67c888e381754be0b6680e28a8c6189876f60fc8cde7736ab979ce8d9460afc5fdacba053321840004deeef6ae03c3271be17716d2b42eaa2dc176c98bf7f3c82d732ef", @generic="e4bae4c733c5c165d517b4c05aee9953c53e48aa54fb5386fe1f0412cd6159bf31faca6a1758630d9f5b584b1db8ded08cb911814b396cfec6a2b4c0c1126f1eb56987f63341e3864598266b1c6cc8728ffed6fa655676a15e333de134447204aa82d1228bfcfcf122e420fa61f2225bddad887b04c94dc46b484455732f51dc44dd4e46e3486866db37ee7ac7787d72e44c96bae0ef76c9e898e7995dfe84beef701fe9501798b3b118cd4879465d774c63b647ee375d41fcc5"]}, @typed={0x8, 0x68, @u32=0x4000}, @generic="d0abe97ce67c68da7d4d53fe12ab08d39af75b5e76d8f1e3d4b27fdf10b35d37271d", @nested={0x60, 0x3, [@typed={0x8, 0x4e, @fd=r0}, @generic="7b70f6579fa7debc1503b181f2b2869d0e088ee3dac8339d4dbcfcd018a9632759690ce97a92aaf2d8a9a17bfd334c1176ecdfd6e41ffe9c0fdd55d708220af6973585811ed3", @typed={0x8, 0x83, @pid=r5}, @typed={0x4, 0x6d}]}, @generic="4d2765ca2a142fc81a21a9e5075e0dd10a24b8bfe04a6a5952061d176906af52fccd8ad798f011521a857f1b96fca6b0c3b574d56b8212a6a3c3d98e67c2ae9282320271f43ba3dbd80bbec22cb2c1435beb1dbff0b3b1e7b45c94c770f3c7aefe5a92a85cdbc25433f32362e916677b5f0e988a6db0fba3a7c7947b3de0d8fda9ef98cbc9c67663f292e66adc7de9a64766a0a9a2de58e002567f4dbbdb73"]}, 0x4ec}, 0x1, 0x0, 0x0, 0x4015}, 0x804) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f00000007c0)={0x0, 0x1}) ioctl$UDMABUF_CREATE_LIST(r0, 0x40187542, &(0x7f0000000040)={0x8}) 00:28:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:08 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, &(0x7f0000000000)=0xfffffffffffffed1) 00:28:08 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x1) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000)=0x100, 0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@empty}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000480)={@ipv4={[], [], @multicast2}, 0x31, r1}) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000200)={0x100000000, 0x4, 0xe5f, 0x37, &(0x7f0000000080)=""/55, 0x2d, &(0x7f00000000c0)=""/45, 0xec, &(0x7f0000000100)=""/236}) 00:28:09 executing program 0: ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e22, @empty}, 0x4, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)='ip6gretap0\x00', 0x101, 0x4, 0x2}) getpeername(0xffffffffffffff9c, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000001c0)=0x80) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x18) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/85, 0x55) getdents(0xffffffffffffffff, &(0x7f00000013c0)=""/4096, 0x1000) 00:28:09 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)) 00:28:09 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)) 00:28:09 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x18}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 00:28:09 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)) [ 334.310099] input: syz1 as /devices/virtual/input/input5 [ 334.377086] input: syz1 as /devices/virtual/input/input6 00:28:09 executing program 0: socketpair$unix(0x1, 0x200000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x4, 0x140) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, &(0x7f0000000300)=0x8) close(r0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x842, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000140)=""/71) write$P9_RGETATTR(r2, &(0x7f0000000980)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0xa0) write$FUSE_INTERRUPT(r2, &(0x7f0000000240)={0x10, 0x0, 0x4}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fchmod(r5, 0x10c) splice(r3, 0x0, r0, 0x0, 0x8, 0x0) close(r0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f00000001c0)) vmsplice(r4, &(0x7f0000000080)=[{&(0x7f0000000100)="fc", 0x1}], 0x1, 0x0) 00:28:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:09 executing program 0: socketpair$unix(0x1, 0x200000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x4, 0x140) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, &(0x7f0000000300)=0x8) close(r0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x842, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000140)=""/71) write$P9_RGETATTR(r2, &(0x7f0000000980)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0xa0) write$FUSE_INTERRUPT(r2, &(0x7f0000000240)={0x10, 0x0, 0x4}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fchmod(r5, 0x10c) splice(r3, 0x0, r0, 0x0, 0x8, 0x0) close(r0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f00000001c0)) vmsplice(r4, &(0x7f0000000080)=[{&(0x7f0000000100)="fc", 0x1}], 0x1, 0x0) 00:28:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:10 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x8200, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="3e0f09260fc729dcec66b815010f00d8360f35c4c1e45f680f66b8dd008ec866baf80cb8e028b187ef66bafc0cb800180000ef663e36218a0d000000c4e1f05f38", 0x41}], 0x1, 0x43, &(0x7f0000000140)=[@efer={0x2, 0x3900}, @cstype0={0x4, 0x8}], 0x2) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000180)=0x7, 0x4) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x10000, 0x2002, 0x0, 0xa, 0x2, 0x3, 0x2}}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x10001, 0xa3, 0x5, 0x0, 0xfffffffffffffff9, 0x8, 0x1, 0x80000000, 0x1, 0x3, 0x6, 0x1, 0x355d, 0x3, 0x9], 0x1f000, 0x100000}) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000300)={0x3f, "d97a7fdd1a857bba8e02b7f28d205e15b9398f621de22e04f32252afd9d0f769", 0x1, 0x1}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000340)={0xffffffff, 0x30313953, 0x8, 0x63c7fea1, 0x2, @discrete={0x5, 0x7}}) r2 = syz_open_dev$video4linux(&(0x7f0000000380)='/dev/v4l-subdev#\x00', 0x7, 0x40) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000400)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x15}}, 0xa0, 0x0, 0x0, 0x0, 0x8001, &(0x7f00000003c0)='ifb0\x00', 0x12f1, 0xef, 0x4}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{0x0}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000500)={r3, 0x8}) rmdir(&(0x7f0000000540)='./file0\x00') writev(r1, &(0x7f0000001bc0)=[{&(0x7f0000000580)="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", 0xfe}, {&(0x7f0000000680)="b2fcb94259ced92931cf5c3fd31ab1598b2713f0b86002e6a1451c4ee2b0aa38d4d96e3e4a08bb1ee7bb043c58d62e85f4fef8758877525830cda6c03a3902ed377f35c90ed074971205f315991d8666f90220f1f8c87a8e3b55b3fb2d03e862e564d2769cb5f61cead1523cad97b2911c8bd330f4c1d58e06907cec742337431289147be475efae7e041e27e8d205af2120dfd30e0b92e73d8a065361265b1a6f67c80612d49077f855f60195f1edb222a1b1d2053c44024ef70e6a43684c3df06d660bbdae8f00fa57ea7b78f9231aed9342c9032ccd53afa58e8e422a5d16056a5e2ea45712af54f6b6b240a533cef2", 0xf1}, {&(0x7f0000000780)="5091aab260a80225ce7b81d56f2071291e05ee4153e083ecd6fbe682d119f5371cc98199a464d38c0d80caa9c72f5fd6fdc8080af9776e7d8351ac175a38a4a7407e25346de7d392c1ca87b275f9ee", 0x4f}, {&(0x7f0000000800)="bc63abf4cdfd7fe704db63c0f2520cbb71ff386f1395f7971bb393540a2ff143faa4f54670ea75f04d01c544e76ddbc1330527dabfb4640c7c3ad636d14c402308a85f6e38aaf789b49635f1d681afd7fc0a5be84b3ca764223f0f260eb57b50a9d297c8855da362ed2452e85945506849695dec8b01b30240a1c2d65a9ecf7b8549edb8ae88fa0df6dc6b45e5e42240d858af72ecf4215e6a651f4622704166", 0xa0}, {&(0x7f00000008c0)="004fc25c3c3bae25d2edd0a1392264b23338f8c621d06abfcac41e3f1267adab8fe69843b5fc3bdd3a042f0fa91a6ac89b7230d127fad921681cfd237ed98484a4cca4e39a161d9b596efee7efb06bb5fa1b35b2cea722bbe29f98bb0233ea334f0266dfdfe469bb7b1ea815e06e2788aa4a386630d9b7d71d024b20e6e4a2cf94afe6afa9f1a7daa744c38ff32a9ce91194529b202821da3382327696e01bc12c16188a93927038ceac59c4937c3976052e73e3fa77eb166bbbe552236e0f0f4efee45a2dcb1b412f1807", 0xcb}, {&(0x7f00000009c0)="e4284ac3b3608cc4d289255ff5fa4784343aaf28389965935c2d95064e60a5098bda69a522ab315108667fc0c95a12ee565dce9ad5c6270d8c86ff1a307cd44d2c28d154b0e9b857ab16edd800a431b11ab9a834cdeab4d4f30c709dca5b8314b6a5b9f92a008ff3eca94446c2dd9fa914c2b217eb2af541e86d64312029f0d2892a12320ecf40b11b88f9871256fa9f04626bad5bdae59c9a670931ef2966b494933575d0e260b554892ca53dad0321c1070c9721334cb2aad0cd541e15a2808807a220bc677a53b8d63a7d428b98fe2313588f17a44738835a7fdbc3b0", 0xde}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="33ed3eeb5f3983f0ffca3dfbde12757b7e4ee46e1a497976d32339fe906d1c946039ebda9d58b7c3300c94ce386b6759e00143ffb1c9c7949b528e574fa2460adae576501688b9853be2644cbfd8d232fe90713c37c2dede613fdc5be9f268cf0aef1c7a689287525801940c862a2d280676d8ef8c75a26f9e531ee027b747aaf97d95315b98f545cf4136e1eb26020fc2929cf1e5e93bc8485227b2f8eb5ea44be4df596c1493081596790cb5000d9b6294a0595f3e238bd1e71cbd212b6681acf57d10b7f9a187d084c6d2c7b3", 0xce}], 0x8) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000001c40), &(0x7f0000001cc0)=0x68) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000001d00)={0x0, 0x8, 0x8, 0x100000001, 0x7f, 0x6c, 0x9, 0x3ff, {0x0, @in6={{0xa, 0x4e21, 0x1, @empty, 0x100}}, 0x100000001, 0x1, 0x80000001, 0x3, 0x8001}}, &(0x7f0000001dc0)=0xb0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000001e00)={r4, @in6={{0xa, 0x4e22, 0x3, @remote, 0xb7}}, 0x7, 0x2}, 0x90) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000001ec0)={0x7ff, 0x44495658, 0x2, @stepwise={0xd5e, 0xb4, 0xcd, 0x0, 0x3, 0x20}}) r6 = shmat(0xffffffffffffffff, &(0x7f0000fe8000/0x3000)=nil, 0x7000) shmdt(r6) ioctl$TCFLSH(r0, 0x540b, 0x8) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000001f00)={0xaa1, 0x0, 0x2016, 0x1, 0x2, {0x8, 0x6}, 0x1}) fcntl$getownex(r1, 0x10, &(0x7f0000001f40)) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x6) write$FUSE_WRITE(r1, &(0x7f0000001f80)={0x18, 0x0, 0x3, {0x200f}}, 0x18) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000001fc0)={r5, 0x66, "7060e7f9462f2a908360ed10b5aebb7ad462de3fad82b807c64a36b9914074c4c0b6828aea548f8714998c11c017010ffe95c6ff80df2ef3680d847aff9105cc7ef43465c785649b7487a45dd96b67e1aaadec4f4cf87ed40c59d19eb35ee93045d762842380"}, &(0x7f0000002040)=0x6e) setxattr$trusted_overlay_nlink(&(0x7f0000002080)='./file0\x00', &(0x7f00000020c0)='trusted.overlay.nlink\x00', &(0x7f0000002100)={'L+', 0x5}, 0x28, 0x1) syz_open_dev$usbmon(&(0x7f0000002140)='/dev/usbmon#\x00', 0x4a3, 0x400000) ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f0000002180)={{0x7, @addr=0x80}, 0x8, 0x40, 0x3}) 00:28:10 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10100, 0x0) recvmsg$kcm(r0, &(0x7f0000003140)={&(0x7f0000000080)=@caif=@rfm, 0x80, &(0x7f0000003100)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x3}, 0x2) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x200000, 0x0) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 00:28:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:10 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x7f, 0x40001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x40) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000040)=0x100000000) unshare(0x400) r2 = userfaultfd(0x0) fcntl$getflags(r2, 0x401) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x117, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {r3, 0x67, "fb0dc3", "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"}}, 0x110) 00:28:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:10 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=ANY=[]}}], 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4) r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000180)=0x100) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x0, 0x16}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r4, 0x8000}}, 0x10) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$tipc(0x1e, 0x2, 0x0) sendmmsg(r5, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x14) ioctl$TIOCLINUX7(r3, 0x541c, &(0x7f0000000140)={0x7, 0xfffffffffffffffb}) 00:28:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:10 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') r0 = memfd_create(&(0x7f0000000300)='-B\xd5NI\xc5j\xbappR\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(!0\xc2\x061\x02\xa3\xba\x80c+`X\xaf^\xaa\xc45\xe6\xcf\x1e\xb60\xee\xaa\x97\xba\x8cg-\xea>\xe7\x88Q\xda\xdf\xb0tY\xc20xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4188aea7, &(0x7f0000000180)={0x10}) 00:28:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:13 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0/file0\x00', 0x90000, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x100, @rand_addr="a2604e3e3f33df26248e23ff2d9d410d", 0x8}}}, &(0x7f00000001c0)=0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r1, &(0x7f0000000340)=0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x113, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x2, {0xa, 0x4e24, 0xf174, @remote}, r4}}, 0x38) sendmsg$nl_netfilter(r2, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000000301ffff0000000000000000000000000800150000000000080008007f2987e6"], 0x24}}, 0x0) 00:28:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="1adc1f123c12a41d88b070") r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="50000000000000002900000003000000020000ac349a8374ebfc0d00000000000000000000d3ca3979b1fc7eba958aaef356d09cf34ff764b483e38db001c019abb8910161bd2078cb06228de42be8f8"], 0x50}, 0x0) sendmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001600)=[{0xc}], 0xc}}], 0xb, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 00:28:14 executing program 2: syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @remote, [{[{0x9100, 0x38, 0x49b3, 0x2}], {0x8100, 0x7ff, 0x8}}], {@ipv6={0x86dd, {0x0, 0x6, "93a745", 0x10, 0x3c, 0x0, @local, @mcast2, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "72b33c", 0x0, "356cd2"}}}}}}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) finit_module(r0, &(0x7f0000000000)='\x00', 0x3) 00:28:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:14 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x101000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f00000000c0)=@ethtool_eeprom={0x47}}) close(r2) close(r1) 00:28:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="080000000000000000000000000000000000001f00000000000000000000000000000000000000000000000063cebc08258cb8b4ce222ca651cc2c"]}) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080), 0x10) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x101, 0x2802424429dbd989) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000140)=0x1, 0x4) r2 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xffffffff, 0x309080) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f00000001c0)) 00:28:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:14 executing program 0: connect$inet6(0xffffffffffffffff, 0x0, 0x0) unshare(0x28000000) r0 = mq_open(&(0x7f00000002c0)='\\\xf7\xa0\xcc\x16H-o\x007\xe6\xb3\x1a\x8eiz\xdd06P\xd4\x88\x00s\xefu\xdfa\x01y\xde\xc26\xaa\x04\xe9F\x87y\xba\a\x00\x00\x00\x00\x00\x00\x005\x98U\xb4\x9b\x88\x9b\xb5\xe4\x9b5\x8ey:oz\xf5\'f\xd6\xfe\x93\xca\x06r\xac\x1b\x8a\x87\xcafw\xd5\"\x0f\xb7|\xb6\x13\xb3\xdb\x91\x04\xd1j\xa1\xcal\xc7jt\xe7\xbdK\xdcR&u{\x03\xf8[\x01\x03$Wl@\xc1\xc8e\\s\x9f\xc1\xa6\x8d\xf5\xe2\xbc\xb6\xe5\xedF\xc8(\x9eH\xeau\xe7\x85\xeb]d\x97\xcd#;\x10\xb9\x182\xcf^1v|\x1cA\x9dFF\xcd\x88?%', 0x6e93ebbbc80884f2, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x83b, 0x80) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_getsetattr(r0, 0x0, &(0x7f0000356000)) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 00:28:15 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r1}}, 0x18) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.capability\x00', 0x0, 0x0, 0x0) getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340)=@known='security.capability\x00\xc9\xbd0\x12\x98>\x02\x15Y`\x19j*\x84X_\x19\xc1\xc8&\x17)\x82\xa8\xde\x1c\xccL\xdci\x87\xff\xc9q\\\xef\"\xce\xe4\xc6s\xd48\x8d^V\x04\xa0\xb88\xaf\xb3[\xd3R\xe4\xc9\xeed\x9aw\x12\b0\x9c\xa46\xbf\x91\x9f\xd9ck\xfa%_\xf4\xb3\x1f@\xf8\x8e\xcc\x9c-\x81!q\xc4\x12bO\f\x14/\xc5Oe\xf4\x929\xf2v\x86\xc1}H\x9e\x92]\xa1\x9b\xf3\x1e0\xecu\xcd\x92#yWf\x1c\xe8\xa1V\x84\x18\xe6\xd3\xd4(\x17O\x89\xa1\x1c\xc8!\xfb\xf6A\"\xa3okA\x1c', 0x0, 0x1e1) 00:28:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:15 executing program 0: unshare(0x8000400) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x8000, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000240)={'broute\x00', 0x0, 0x3, 0x22, [], 0x2, &(0x7f0000000140)=[{}, {}], &(0x7f0000000200)=""/34}, &(0x7f00000002c0)=0x78) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000000c0)={0x12, 0xc0725928f77a41ce, 0xfa00, {&(0x7f00000001c0), r3, r2}}, 0x8b) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 00:28:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = gettid() fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, r1}) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x4400) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x6, 0xffffffffffffffff}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000500)={r3, 0xffffffffffffff05}, &(0x7f0000000540)=0x8) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000100)={"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"}) 00:28:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x3, 0x19) timer_create(0x7, &(0x7f00000002c0)={0x0, 0x4, 0x4, @thr={&(0x7f0000000100)="78755c75330ba4dc2372eb036b34a74e4e8b044180d56c4ae1780f6dc6a552011acc3058af0b3582085dbf54ad264088874bfda8ecf3404009054cc520b6f1f3f20809b6564f55297ddaf9ce4dea9852d521ce6ab21cba694caaf43dbf5595470069e27d5bb006c463b9e151f33a4d7b3e2fa54feea56c9ec3d0ba239eae01499f76945747afcc1233e0", &(0x7f0000000200)="d0de8f43aeab4d1449a2cc5768ca8e8531bc94c80e4e9079f84350e8e9cce20f1fa311f7307ee61d114c6e0d70a63326eff5c5332582334ee055b427ae9191770e23e6d6cd35ce22ed00d2a725d71a78685393a5f8f7b3f2978df05700baad6603a42cedd6d2aad8bb8c8c15e47c40910d52435dcdfb846dbeabd65d4e3b4d528b919a7cc3"}}, &(0x7f0000000300)=0x0) timer_delete(r2) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000001c0)={@multicast2, @local, 0x0, 0x2, [@local, @local]}, 0x18) 00:28:15 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x8083) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x0, 0x10000001002, 0x0, [0xfffffffe]}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000100)={0xe0, 0x46, 0x5, 0x0, 0x0, [{r0, 0x0, 0x78}, {r2, 0x0, 0x48d}, {r0, 0x0, 0x4}, {r1, 0x0, 0x1}, {r2, 0x0, 0x4}]}) fallocate(r2, 0x1, 0x3, 0x209) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={r0, 0x0, 0x2, 0x3, 0x6}) connect$l2tp(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x2, 0x1, 0x3, {0xa, 0x4e23, 0x8a, @loopback, 0x5}}}, 0x32) 00:28:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:15 executing program 0: timer_create(0x2, 0x0, &(0x7f0000000140)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f000091b000/0x3000)=nil, 0x3000}, &(0x7f0000000100)=0x10) timer_settime(0x0, 0x0, &(0x7f000004a000)={{}, {r2, r3+10000000}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) timer_gettime(r0, &(0x7f0000000180)) 00:28:16 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x0, 0x0) write$ppp(r0, &(0x7f0000000000)="dcdc5b22c84aebdb8c32fe51dbe75cafd5d9e8ec34d5be265713f1f5beed9005f9473240831d0516eb13908180ef98cf0cc7f4f5f99fed25ae648ac54e002213a65bbf773b70f50b1f7029", 0x4b) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PPPOEIOCDFWD(r0, 0x40045108, 0x70e000) 00:28:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:16 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20}, 0x1c) connect$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) [ 341.209027] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 341.209027] program syz-executor.0 not setting count and/or reply_len properly 00:28:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[], 0x0) sendto(0xffffffffffffffff, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) [ 341.324103] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 341.324103] program syz-executor.0 not setting count and/or reply_len properly 00:28:16 executing program 2: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0xfffffffffd, 0x31, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x0) pselect6(0xfffffe1a, &(0x7f0000000040)={0x3, 0x1, 0x0, 0x0, 0x6, 0x3ae, 0x80000}, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x1c9c380}, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x40, 0x10400) syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x5, 0x80) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f00000000c0)=0x7fff) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000140)) 00:28:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[], 0x0) sendto(0xffffffffffffffff, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:16 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x80800, 0x0) getsockname$inet(r0, &(0x7f0000000140), &(0x7f0000000180)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, [0x5f]}, 0x2c) [ 341.644602] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 341.644602] program syz-executor.0 not setting count and/or reply_len properly 00:28:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[], 0x0) sendto(0xffffffffffffffff, &(0x7f0000000240)="7970ec1eca62bafc3754c76e9b7315169112541017a8560159ad51740d1c2da9e94267973c830bd4532b459c8ad4e2a75882f71ee2a0db125ce827be26f1aed542bdb6d5ec19a984bb4febf6df624ff3a7e9d47801738b98484cb6c6464a0b87662491b5700fb2264235a57920c33603f9d1042cf17492fb852ab21d7bdeb5cb8907aafcbec0c7719bd568728026f253a4024691f878ed74208f3f0192944625679c2b52b4b2add186fc11e13aec7a6e7f6151ce9985512179758006d894de77a306751edf6a67b2030ea1f02e35cb68164ec4b3a1488e5fec3261", 0xdb, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:16 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x40) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r1, 0x70a, 0x70bd25, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x4}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x20000000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e23, 0x2, @mcast2, 0x5}}}, 0x84) r5 = socket$l2tp(0x18, 0x1, 0x1) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0x7fffffff) ioctl(r5, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r6, 0xc004aea7, &(0x7f0000000000)) 00:28:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) [ 342.111550] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 342.111550] program syz-executor.0 not setting count and/or reply_len properly 00:28:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) [ 342.439738] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 342.439738] program syz-executor.0 not setting count and/or reply_len properly 00:28:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) 00:28:17 executing program 2: mknod(&(0x7f0000000000)='./file0\x00', 0x200, 0x84) r0 = pkey_alloc(0x0, 0x0) pkey_free(r0) getxattr(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)=@random={'system.', ']\x00'}, &(0x7f0000000180)=""/4096, 0x1000) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 00:28:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = open(&(0x7f00000001c0)='./file0\x00', 0x8040, 0x0) lremovexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)=@known='system.posix_acl_access\x00') connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x1, @local, 0x7f}, 0x1c) timerfd_create(0x6, 0x80000) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) 00:28:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:18 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x2000, 0x1000}, 0x18) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7, 0x2a0040) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000040)={0x1, 0x0, 0x102, 0x4, {0x4, 0x2, 0x57, 0x9}}) 00:28:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)) 00:28:18 executing program 2: mkdir(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xfffffffffffffffc) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) mknod(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) renameat2(r0, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000280)='./file0\x00', 0x2) 00:28:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000080)=""/124) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000200)) 00:28:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) 00:28:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20001, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x34004, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\xf8\xff\xff\xaf\xb1\xf96\x1d\xaf[g', 0x4007}) ioctl$TUNSETOFFLOAD(r0, 0x400454de, 0x8000000000000000) 00:28:19 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYPTR64], 0x8) set_robust_list(&(0x7f00000001c0)={0x0, 0x8000, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x1013, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x2) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$int_in(r0, 0x280081000005008, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @local}}, 0xffffffffffffff7f, 0x7, 0x5, 0x6, 0x3}, &(0x7f0000000300)=0x98) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000340)={r2, 0x71, "ca3b92fcdadfe3f89b360eb35c124f95fef7c9b95b151a1111f79c26a7aeb967a0026febc41b5f20c3276b8f7e26e4d069a5c7bf094ec55919990c6d6ae5d948e36e276de71d348c699484224f8518f2cd366157bc5264d9f309c7096c09d2e47274b7bd83a1bc3f5b4bd2962473b963c5"}, &(0x7f00000003c0)=0x79) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x2e) 00:28:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)) 00:28:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) 00:28:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)) 00:28:20 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000240)=0x5, 0x4) r1 = accept(0xffffffffffffff9c, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000000)=0x80) r2 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x8, 0x400) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f00000001c0)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0xfffffffffffffff8, @dev={0xfe, 0x80, [], 0x1b}, 0x10000}, @in6={0xa, 0x4e21, 0x7fff, @remote, 0xffffffffffffffe3}], 0x38) syz_open_procfs(0x0, &(0x7f0000000200)) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000280)={0x200000000000000, 0x2000, 0xc, 0x0, 0x10}) 00:28:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:28:20 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e21, 0x4, @rand_addr="4902e99cfccddb26a688edfdba5936d8", 0x7}, {0xa, 0x4e23, 0x200, @mcast2, 0x200}, 0xc02, [0xff, 0x3, 0x5, 0x7ff, 0x7, 0xb8, 0x3ff, 0x2]}, 0x5c) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000040), 0x4) 00:28:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:20 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x1011, r0, 0x100000000) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000040)=""/183) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r1, 0x8001, 0xb5}, &(0x7f00000001c0)=0x8) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000200)={0x3, 0x6, 0xfffffffffffffffc}) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x70, 0x5, 0x4, 0x0, 0x8, 0x0, 0x1000, 0x400, 0x2, 0x3d8, 0xfff, 0x1, 0x101, 0x9, 0x3, 0x8a82, 0x7fffffff, 0x8, 0xe203, 0x80000000, 0x8, 0x5, 0x800, 0xffffffff, 0x540, 0x7a7, 0x8365, 0x7, 0xfffffffffffffff7, 0x9588, 0x4, 0x400, 0x2, 0xfffffffffffffffb, 0x3f, 0x6, 0x3, 0x0, 0x7ff, 0x0, @perf_bp={&(0x7f0000000240), 0xe}, 0x0, 0x100, 0x3ff, 0xf, 0x6, 0x6562, 0x6}, r0, 0x0, r0, 0xa) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000340)={r2, 0x2}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000380)={0x9c2, 0x80000000, 0x6e4, 0x0, 0x0, [], [], [], 0xfffffffffffffffc, 0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000004c0)={{0x10001, 0x2}, 0x1, 0x9553, 0x6, {0x3ff, 0x7ff}, 0x800, 0xfff}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000540)=0x7, 0x4) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) sendmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000580)="f157a1aa68bb7a5ee77174d99a2ba5008c5577b76f275fcd035873faf66fe8c4a998ed16fe207ad3ce4afeb39d7d6f1647ef3e53d464a6dcbfcbbcd3f9b1757991069c0cd2a18fc278ccfa31", 0x4c}, {&(0x7f0000000600)="c8d522b54ca5004a5e6b4c4037963e188d346de88e6f9e07728a64026b03f26d8c1b0562a0dea6c9a77a9241c8dc6a81b8bb5eee4f53ca79efa50ca06fec00db75f6bc9776bf496e21850c14f68b9655508cc646e858ffad617e4da3bba326d311696bf3449d4ad953e56b932aa7783ff622d69de9150727a49fdab8898f4783b447416ff76e9d8dc0f6d31ead", 0x8d}, {&(0x7f00000006c0)}, {&(0x7f0000000700)="4573c7fa52cd8b3672674132944900a3a8533c5da70a8b030e0ac39cd2e7c66fd3e4caa6bb7c63371c9ef76b16996e73ac2007e437d53d9faecb1fd9739b60d133d4bbcb3153fccc9a05ca03e36864d9d7f4f1", 0x53}], 0x4, &(0x7f00000007c0)=[{0x50, 0x13b, 0x3, "6758071460732f6f21b923052f4e05ce20c02e98b4288e5b126ea1b690af32eeee7e216bb30ff8c35937e7185675623e01b74ea97d8c11e74ec7"}], 0x50}, 0x100000001}], 0x1, 0x8000) r4 = syz_open_dev$swradio(&(0x7f0000000880)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000900)={0x0, 0x0}, &(0x7f0000000940)=0xc) lstat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r4, &(0x7f00000008c0)='./file0\x00', r5, r6, 0x1000) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000001, 0x40010, r0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000a80)={&(0x7f0000000a40)=[0x7ff, 0x800, 0x7fff, 0x5, 0x0, 0x7, 0x400, 0x7, 0x10f], 0x9, 0x2, 0x2, 0xbb, 0x8000, 0x6, {0x1, 0x5, 0x4, 0x800, 0x2, 0x9da, 0x0, 0xf600000000000000, 0x7c36, 0xce2a, 0x4b, 0x1000, 0x3, 0x4, "1de07f066d7382b8d58599a8312a8f57650f463231b4c4f565d8225a8cdd4aab"}}) prctl$PR_CAPBSET_DROP(0x18, 0x10) socket$vsock_dgram(0x28, 0x2, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/cachefiles\x00', 0x131041, 0x0) ioctl$LOOP_CLR_FD(r7, 0x4c01) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000b40)={{0x1, 0x1, 0x18b5, 0x0, '\x00', 0x400}, 0x0, [0x40000000000000, 0x6, 0x2, 0x1, 0x9, 0x2, 0x9, 0x3ff, 0x2, 0xeb0, 0x0, 0x800, 0x3f, 0xcf, 0xcebc, 0x0, 0x8, 0x9, 0x101, 0x100, 0x2, 0x13cbedb1, 0x1000, 0x7f, 0x7, 0x1, 0xfffffffffffffff8, 0x8, 0x2f7, 0x2, 0x0, 0x679, 0x80, 0x8001, 0xa490, 0x0, 0x3, 0x7, 0x4, 0x8, 0x7fff, 0xfffffffffffffff7, 0xffffffff80000001, 0x572a951f, 0x0, 0xd90f, 0x0, 0x9, 0x100, 0x5, 0xfff, 0x0, 0x9, 0x0, 0x7, 0x5, 0x4, 0x2, 0x3, 0x8, 0x96a, 0x200, 0x6, 0xabf9, 0x101, 0xdab7, 0x3, 0x7, 0x80000000, 0x1, 0x3, 0x10001, 0xffffffff, 0x4, 0xebe, 0x1000, 0x6, 0x3e7f, 0x9dc, 0x7fff, 0x1, 0x1f, 0x84, 0x8, 0xd13e, 0x40, 0x40, 0x3, 0x5, 0x3, 0x1f, 0x9, 0x800, 0x6, 0x39, 0x8, 0x27, 0x7d9, 0x5, 0xfffffffffffffffe, 0x8, 0x5, 0x1, 0x8e, 0xffffffff, 0x2, 0x9, 0x1, 0x3, 0x512, 0x7db, 0xa0, 0x4, 0x5, 0x0, 0xff, 0x7ff, 0xb21, 0x4, 0x80, 0xff, 0x8, 0x2000, 0x9, 0xffffffff, 0x8, 0x8], {0x0, 0x1c9c380}}) ioctl$TIOCLINUX4(r7, 0x541c, &(0x7f0000001040)) ioctl$CAPI_MANUFACTURER_CMD(r4, 0xc0104320, &(0x7f00000010c0)={0x200, &(0x7f0000001080)="b29dbd67561793c86eeec2e3a06c8c18bbe182fc2416c648cf720d4127e668f0"}) mq_unlink(&(0x7f0000001100)='/dev/swradio#\x00') r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001180)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x10002000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, r8, 0x302, 0x70bd27, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x800) [ 345.854859] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 345.854859] program syz-executor.0 not setting count and/or reply_len properly 00:28:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) [ 346.126246] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 346.126246] program syz-executor.0 not setting count and/or reply_len properly 00:28:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) [ 346.389203] IPVS: ftp: loaded support on port[0] = 21 [ 346.463912] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 346.463912] program syz-executor.0 not setting count and/or reply_len properly 00:28:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:21 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x177, 0x4) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000100)=0x5c, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000020d000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=""/2, 0x2}}], 0x1, 0x2040, 0x0) socket$inet6(0xa, 0x8000a, 0x0) [ 346.800236] chnl_net:caif_netlink_parms(): no params data found [ 346.894617] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 346.989867] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.996731] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.005465] device bridge_slave_0 entered promiscuous mode [ 347.026961] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.033731] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.042986] device bridge_slave_1 entered promiscuous mode [ 347.103243] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 347.117088] bond0: Enslaving bond_slave_1 as an active interface with an up link 00:28:22 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x200, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000040)={0x3, 0x5, 0x85c2, 0x0, 0x8, 0x0, 0x2, 0x6a9, 0xdd, 0x2800000000000000, 0x80000001, 0x1, 0x0, 0xffff, 0x100000001, 0xf8, 0x0, 0x2, 0x1}) ioctl$KVM_SET_CPUID(r0, 0xc0185500, &(0x7f0000000700)=ANY=[@ANYPTR64=&(0x7f0000000680)=ANY=[]]) [ 347.157628] team0: Port device team_slave_0 added [ 347.167020] team0: Port device team_slave_1 added [ 347.249066] device hsr_slave_0 entered promiscuous mode [ 347.303578] device hsr_slave_1 entered promiscuous mode 00:28:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) [ 347.388452] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.395089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.402363] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.408903] bridge0: port 1(bridge_slave_0) entered forwarding state 00:28:22 executing program 2: r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x40) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x220, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000080)={0x0, r3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x0, r5}) 00:28:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) [ 347.813408] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.823212] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.905738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.939871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 347.948578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 347.967580] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.006719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 00:28:23 executing program 2: mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x200000000000003, &(0x7f0000000040)=0xbf207ff, 0x100, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000336000/0x3000)=nil, 0x3) [ 348.015507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 348.023821] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.030608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.084765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 348.093618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 348.102284] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.111170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.119191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 348.128608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 348.137968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 348.148322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 348.157189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 348.166291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 348.175218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 348.183666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 348.192202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 348.200657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 348.218244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 00:28:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'ofb(blowfish)\x00'}, 0x58) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0x2000) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000080)=0x2) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000040)={0x600, 0x1, 0x80000000, 0xe9e2}, 0x10) close(r0) [ 348.234874] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 348.324956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.563058] QAT: Invalid ioctl [ 348.570392] QAT: Invalid ioctl [ 348.580702] QAT: Invalid ioctl [ 348.586770] QAT: Invalid ioctl [ 348.590461] QAT: Invalid ioctl [ 348.595818] QAT: Invalid ioctl [ 348.600700] QAT: Invalid ioctl [ 348.607639] QAT: Invalid ioctl [ 348.619449] QAT: Invalid ioctl [ 348.625909] QAT: Invalid ioctl [ 348.629735] QAT: Invalid ioctl [ 348.634310] QAT: Invalid ioctl [ 348.638088] QAT: Invalid ioctl [ 348.641574] QAT: Invalid ioctl [ 348.647305] QAT: Invalid ioctl [ 348.656701] QAT: Invalid ioctl 00:28:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa6, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0x43, 0x2, 0xff, "3f8c2550a73fd792e71b2240d3a3f08c", "47a2f958ccf3975c24760b7ffec8bbdd09c55282fa5f29af4757841ef26b7bbbbf002d6d1035725f1b037a0b6adf"}, 0x43, 0x1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000380)="0adc1f123c12a41d88b070") stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r5, 0x409a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xba]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:28:23 executing program 1 (fault-call:4 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:23 executing program 2: socketpair(0x5, 0x80006, 0x8001, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) ioctl$sock_ifreq(r0, 0x891f, &(0x7f0000000300)={'bond_slave_1\x00', @ifru_data=&(0x7f00000002c0)="8c7e4b8967a5a5cd7852c27aacf24ad8ee901f6af1ab6c1552581f43bb32237d"}) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xcb, 0xc8, &(0x7f0000000040)="8ec9ee741d6ea7affc230869b7d9d350021f6506f35ef1734e4fe2fb70ef5702d2e3caae356604284ea4abbc7d4c923648b16c5830b61f5787e1d88cadbcdab1a59967a4747bae34eb343712396c7d72333aa008aca9a0cec6e6ffbcb50dd928349f2fc27af8240670c5905eabc52bfb6b3369da5979feb5200944faf476d2df81de2c1856a821fe6853ba937648a7b8da70ad188d7ad7d03f49bc6215bc78fba66b8bc869f506cc39177e1224f806cb44ba8862b7ddc3a70ccf32d4607e1ad6afb4e5f4a65e63991bc81d", &(0x7f0000000140)=""/200, 0x5}, 0x28) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) accept4$alg(r2, 0x0, 0x0, 0x80000) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)) clock_gettime(0xfffffffffffffff2, &(0x7f0000000340)) 00:28:23 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) [ 348.912460] FAULT_INJECTION: forcing a failure. [ 348.912460] name failslab, interval 1, probability 0, space 0, times 1 [ 348.924070] CPU: 0 PID: 11358 Comm: syz-executor.1 Not tainted 5.0.0+ #17 [ 348.931051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.940493] Call Trace: [ 348.943177] dump_stack+0x173/0x1d0 [ 348.946876] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 348.952131] should_fail+0xa19/0xb20 [ 348.955935] __should_failslab+0x278/0x2a0 [ 348.960261] should_failslab+0x29/0x70 [ 348.964233] kmem_cache_alloc_node_trace+0x13e/0xc70 [ 348.969405] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 348.974658] ? __get_vm_area_node+0x2b6/0x7f0 [ 348.979219] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 348.984748] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 348.990022] __get_vm_area_node+0x2b6/0x7f0 [ 348.994429] __vmalloc_node_range+0x328/0x1370 [ 348.999079] ? n_tty_open+0x4d/0x2d0 [ 349.002868] vzalloc+0xd8/0xf0 [ 349.006122] ? n_tty_open+0x4d/0x2d0 [ 349.009901] n_tty_open+0x4d/0x2d0 [ 349.013513] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 349.018774] ? n_tty_inherit_ops+0xd0/0xd0 [ 349.023066] ? n_tty_inherit_ops+0xd0/0xd0 [ 349.027366] tty_set_ldisc+0x7c9/0x24d0 [ 349.031506] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 349.036759] ? tty_wait_until_sent+0x59/0x6d0 [ 349.041358] tty_ioctl+0x1a45/0x2ed0 [ 349.045160] ? __msan_poison_alloca+0x1e0/0x290 [ 349.049904] ? tty_do_resize+0x230/0x230 [ 349.054033] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 349.059295] ? do_vfs_ioctl+0x187/0x2bf0 [ 349.063428] ? tty_do_resize+0x230/0x230 [ 349.067551] do_vfs_ioctl+0xebd/0x2bf0 [ 349.071507] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 349.076778] ? security_file_ioctl+0x92/0x200 [ 349.081441] __se_sys_ioctl+0x1da/0x270 [ 349.085492] __x64_sys_ioctl+0x4a/0x70 [ 349.089448] do_syscall_64+0xbc/0xf0 [ 349.093344] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 349.098589] RIP: 0033:0x458209 [ 349.101860] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 349.120835] RSP: 002b:00007fc131f9bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 349.130025] RAX: ffffffffffffffda RBX: 00007fc131f9bc90 RCX: 0000000000458209 [ 349.137458] RDX: 0000000020000040 RSI: 0000000000005423 RDI: 0000000000000003 [ 349.144800] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 349.152129] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc131f9c6d4 [ 349.159461] R13: 00000000004c2472 R14: 00000000004d4e10 R15: 0000000000000004 [ 349.169267] syz-executor.1: vmalloc: allocation failure: 8896 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 349.183162] CPU: 0 PID: 11358 Comm: syz-executor.1 Not tainted 5.0.0+ #17 [ 349.190136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.199529] Call Trace: [ 349.202209] dump_stack+0x173/0x1d0 [ 349.205916] warn_alloc+0x4eb/0x710 [ 349.209653] __vmalloc_node_range+0x200/0x1370 [ 349.214423] vzalloc+0xd8/0xf0 [ 349.217679] ? n_tty_open+0x4d/0x2d0 [ 349.221911] n_tty_open+0x4d/0x2d0 [ 349.225522] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 349.230790] ? n_tty_inherit_ops+0xd0/0xd0 [ 349.235086] ? n_tty_inherit_ops+0xd0/0xd0 [ 349.239400] tty_set_ldisc+0x7c9/0x24d0 [ 349.243463] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 349.248728] ? tty_wait_until_sent+0x59/0x6d0 [ 349.253325] tty_ioctl+0x1a45/0x2ed0 [ 349.257122] ? __msan_poison_alloca+0x1e0/0x290 [ 349.261853] ? tty_do_resize+0x230/0x230 [ 349.265987] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 349.271247] ? do_vfs_ioctl+0x187/0x2bf0 [ 349.275380] ? tty_do_resize+0x230/0x230 [ 349.279498] do_vfs_ioctl+0xebd/0x2bf0 [ 349.283471] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 349.288750] ? security_file_ioctl+0x92/0x200 [ 349.293412] __se_sys_ioctl+0x1da/0x270 [ 349.297546] __x64_sys_ioctl+0x4a/0x70 [ 349.301505] do_syscall_64+0xbc/0xf0 [ 349.305300] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 349.310536] RIP: 0033:0x458209 [ 349.313794] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 349.332772] RSP: 002b:00007fc131f9bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 349.340555] RAX: ffffffffffffffda RBX: 00007fc131f9bc90 RCX: 0000000000458209 [ 349.347875] RDX: 0000000020000040 RSI: 0000000000005423 RDI: 0000000000000003 [ 349.355192] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 349.362503] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc131f9c6d4 [ 349.369819] R13: 00000000004c2472 R14: 00000000004d4e10 R15: 0000000000000004 [ 349.377220] Mem-Info: [ 349.379770] active_anon:84760 inactive_anon:192 isolated_anon:0 [ 349.379770] active_file:7506 inactive_file:28259 isolated_file:0 [ 349.379770] unevictable:0 dirty:64 writeback:0 unstable:0 [ 349.379770] slab_reclaimable:4154 slab_unreclaimable:9872 [ 349.379770] mapped:41042 shmem:244 pagetables:800 bounce:0 [ 349.379770] free:984250 free_pcp:684 free_cma:0 [ 349.413200] Node 0 active_anon:339040kB inactive_anon:768kB active_file:29884kB inactive_file:113136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:164168kB dirty:248kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 202752kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 349.441752] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 349.467735] Node 0 DMA free:15904kB min:212kB low:264kB high:316kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 349.494084] lowmem_reserve[]: 0 2800 3490 3490 [ 349.498749] Node 0 DMA32 free:816288kB min:38380kB low:47972kB high:57564kB active_anon:333260kB inactive_anon:28kB active_file:20896kB inactive_file:108276kB unevictable:0kB writepending:148kB present:3129332kB managed:2872032kB mlocked:0kB kernel_stack:3136kB pagetables:2636kB bounce:0kB free_pcp:2052kB local_pcp:736kB free_cma:0kB [ 349.528690] lowmem_reserve[]: 0 0 690 690 [ 349.533014] Node 0 Normal free:11656kB min:9464kB low:11828kB high:14192kB active_anon:5780kB inactive_anon:740kB active_file:8988kB inactive_file:4860kB unevictable:0kB writepending:52kB present:786432kB managed:706992kB mlocked:0kB kernel_stack:10752kB pagetables:416kB bounce:0kB free_pcp:812kB local_pcp:368kB free_cma:0kB [ 349.562132] lowmem_reserve[]: 0 0 0 0 [ 349.566014] Node 1 Normal free:3092996kB min:42048kB low:52560kB high:63072kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:8kB present:3932160kB managed:3141280kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 349.593988] lowmem_reserve[]: 0 0 0 0 [ 349.597873] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 349.611377] Node 0 DMA32: 5*4kB (UM) 3*8kB (UME) 3*16kB (UE) 2*32kB (UM) 18*64kB (UME) 9*128kB (UME) 2*256kB (UE) 3*512kB (UM) 1*1024kB (E) 2*2048kB (U) 197*4096kB (UM) = 816540kB [ 349.627877] Node 0 Normal: 0*4kB 35*8kB (E) 13*16kB (ME) 15*32kB (UME) 49*64kB (UE) 45*128kB (UE) 5*256kB (UE) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 11656kB [ 349.642682] Node 1 Normal: 5*4kB (UME) 8*8kB (UME) 5*16kB (UME) 3*32kB (ME) 4*64kB (UME) 6*128kB (ME) 1*256kB (M) 4*512kB (M) 7*1024kB (UM) 5*2048kB (ME) 750*4096kB (M) = 3092996kB [ 349.659323] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 349.668367] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 349.677069] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 349.686172] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 349.694867] 36065 total pagecache pages [ 349.698877] 0 pages in swap cache [ 349.702462] Swap cache stats: add 0, delete 0, find 0/0 [ 349.707857] Free swap = 0kB [ 349.710905] Total swap = 0kB 00:28:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:24 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620c, &(0x7f0000000000)={r1}) [ 349.714056] 1965979 pages RAM [ 349.717193] 0 pages HighMem/MovableOnly [ 349.721208] 281927 pages reserved [ 349.724806] 0 pages cma reserved [ 349.798177] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 349.798177] program syz-executor.0 not setting count and/or reply_len properly [ 349.825326] binder: 11367:11368 ioctl c018620c 20000000 returned -1 00:28:24 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000200)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x109, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}}, 0x20000055) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r2, 0x56, 0x0) lseek(r3, 0x4, 0x0) mkdir(&(0x7f0000000680)='./file0/file0\x00', 0x0) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{0x77359400}, {0x77359400}}) rmdir(&(0x7f0000000140)='./file0/file0\x00') 00:28:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x101000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000180)=0x10) ioctl$KDADDIO(r0, 0x400455c8, 0xba5) r2 = open(&(0x7f0000000000)='./file0\x00', 0x2040040, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000040)={0x1}) 00:28:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:25 executing program 1 (fault-call:4 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20) r1 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r1, 0x100008912, &(0x7f0000000100)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x60000, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000040)={0x3, 0x6, 0x7, 0x100}) 00:28:25 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000480)=0x3a) r3 = dup(r1) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000100)={0x3, {{0x2, 0x4e23, @broadcast}}, 0x0, 0x2, [{{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}}, {{0x2, 0x4e23, @remote}}]}, 0x190) setsockopt$inet6_tcp_int(r1, 0x6, 0x400000000000000a, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000400)={0x0, 0x37, "4b5d320b9af11699638f4cb773c97e5c3fe34986f2c4cb68467bfbb2cc9f3f3f60b51f0434507f634c8656f18e22de389fb28127ae9e69"}, &(0x7f0000000440)=0x3f) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000004c0)={r4, 0x6e0, 0x10000}, 0x8) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r5 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) getresuid(&(0x7f00000003c0), &(0x7f0000000380), &(0x7f0000001380)) perf_event_open(&(0x7f00000012c0)={0x5, 0x70, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) times(&(0x7f0000000080)) ftruncate(r5, 0x7fff) sendfile(r3, r5, 0x0, 0x8000fffffffe) tkill(r0, 0x1000000000016) [ 350.213018] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 350.213018] program syz-executor.0 not setting count and/or reply_len properly [ 350.327281] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 00:28:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) [ 350.583729] FAULT_INJECTION: forcing a failure. [ 350.583729] name failslab, interval 1, probability 0, space 0, times 0 [ 350.595206] CPU: 0 PID: 11399 Comm: syz-executor.1 Not tainted 5.0.0+ #17 [ 350.602184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.611580] Call Trace: [ 350.614259] dump_stack+0x173/0x1d0 [ 350.617960] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 350.623260] should_fail+0xa19/0xb20 [ 350.627064] __should_failslab+0x278/0x2a0 [ 350.631400] should_failslab+0x29/0x70 [ 350.635375] kmem_cache_alloc_node_trace+0x13e/0xc70 [ 350.640541] ? should_fail+0x5e/0xb20 [ 350.644401] ? alloc_vmap_area+0x210/0x15f0 [ 350.648808] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 350.654065] alloc_vmap_area+0x210/0x15f0 [ 350.658306] ? kmem_cache_alloc_node_trace+0xb59/0xc70 [ 350.663674] __get_vm_area_node+0x3e6/0x7f0 [ 350.668085] __vmalloc_node_range+0x328/0x1370 [ 350.672722] ? n_tty_open+0x4d/0x2d0 [ 350.676525] vzalloc+0xd8/0xf0 [ 350.679781] ? n_tty_open+0x4d/0x2d0 [ 350.683546] n_tty_open+0x4d/0x2d0 [ 350.687156] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 350.692399] ? n_tty_inherit_ops+0xd0/0xd0 [ 350.696691] ? n_tty_inherit_ops+0xd0/0xd0 [ 350.700990] tty_set_ldisc+0x7c9/0x24d0 [ 350.705042] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 350.710293] ? tty_wait_until_sent+0x59/0x6d0 [ 350.714884] tty_ioctl+0x1a45/0x2ed0 [ 350.718678] ? __msan_poison_alloca+0x1e0/0x290 [ 350.723431] ? tty_do_resize+0x230/0x230 [ 350.727574] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 350.732861] ? do_vfs_ioctl+0x187/0x2bf0 [ 350.737011] ? tty_do_resize+0x230/0x230 [ 350.741137] do_vfs_ioctl+0xebd/0x2bf0 [ 350.745102] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 350.750368] ? security_file_ioctl+0x92/0x200 [ 350.754944] __se_sys_ioctl+0x1da/0x270 [ 350.758993] __x64_sys_ioctl+0x4a/0x70 [ 350.762950] do_syscall_64+0xbc/0xf0 [ 350.766747] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 350.771989] RIP: 0033:0x458209 [ 350.775242] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 350.779165] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 350.779165] program syz-executor.0 not setting count and/or reply_len properly [ 350.794188] RSP: 002b:00007fc131f9bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 350.794232] RAX: ffffffffffffffda RBX: 00007fc131f9bc90 RCX: 0000000000458209 [ 350.794255] RDX: 0000000020000040 RSI: 0000000000005423 RDI: 0000000000000003 [ 350.794280] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 350.794306] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc131f9c6d4 [ 350.794330] R13: 00000000004c2472 R14: 00000000004d4e10 R15: 0000000000000004 [ 350.796653] syz-executor.1: vmalloc: allocation failure: 8896 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 350.868998] CPU: 0 PID: 11399 Comm: syz-executor.1 Not tainted 5.0.0+ #17 [ 350.875969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.885362] Call Trace: [ 350.888031] dump_stack+0x173/0x1d0 [ 350.891738] warn_alloc+0x4eb/0x710 [ 350.895475] __vmalloc_node_range+0x200/0x1370 [ 350.900138] vzalloc+0xd8/0xf0 [ 350.903399] ? n_tty_open+0x4d/0x2d0 [ 350.907286] n_tty_open+0x4d/0x2d0 [ 350.910888] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 350.916135] ? n_tty_inherit_ops+0xd0/0xd0 [ 350.920433] ? n_tty_inherit_ops+0xd0/0xd0 [ 350.924727] tty_set_ldisc+0x7c9/0x24d0 [ 350.928810] ? kmsan_get_shadow_origin_ptr+0x73/0x490 00:28:25 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = fcntl$getown(0xffffffffffffff9c, 0x9) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000340)=0x4) sendmsg$netlink(r3, &(0x7f0000000300)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xc, &(0x7f00000000c0), 0x0, &(0x7f0000000280)=[@rights={0x28, 0x1, 0x1, [r2, r0, r1, r2, r0]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}], 0x48, 0x881}, 0x20008800) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x7ff) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) syz_kvm_setup_cpu$x86(r0, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffe7f, 0x0, 0x0, 0x48) 00:28:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x88, 0x0, 0x0, 0xfffffffffffffe34) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffc}}) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000340)=0x2) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x90) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000300)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x400) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040)=0x81, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x802, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 350.934059] ? tty_wait_until_sent+0x59/0x6d0 [ 350.938644] tty_ioctl+0x1a45/0x2ed0 [ 350.942436] ? __msan_poison_alloca+0x1e0/0x290 [ 350.947180] ? tty_do_resize+0x230/0x230 [ 350.951308] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 350.956563] ? do_vfs_ioctl+0x187/0x2bf0 [ 350.960696] ? tty_do_resize+0x230/0x230 [ 350.964826] do_vfs_ioctl+0xebd/0x2bf0 [ 350.968790] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 350.974037] ? security_file_ioctl+0x92/0x200 [ 350.978592] __se_sys_ioctl+0x1da/0x270 [ 350.982641] __x64_sys_ioctl+0x4a/0x70 [ 350.986585] do_syscall_64+0xbc/0xf0 [ 350.990366] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 350.995595] RIP: 0033:0x458209 [ 350.998848] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 351.017805] RSP: 002b:00007fc131f9bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 351.025572] RAX: ffffffffffffffda RBX: 00007fc131f9bc90 RCX: 0000000000458209 [ 351.032882] RDX: 0000000020000040 RSI: 0000000000005423 RDI: 0000000000000003 [ 351.040194] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 351.047538] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc131f9c6d4 [ 351.054855] R13: 00000000004c2472 R14: 00000000004d4e10 R15: 0000000000000004 [ 351.062376] Mem-Info: [ 351.064916] active_anon:84753 inactive_anon:189 isolated_anon:0 [ 351.064916] active_file:7508 inactive_file:28627 isolated_file:0 [ 351.064916] unevictable:0 dirty:61 writeback:0 unstable:0 [ 351.064916] slab_reclaimable:4159 slab_unreclaimable:10028 [ 351.064916] mapped:41038 shmem:244 pagetables:806 bounce:0 [ 351.064916] free:983022 free_pcp:651 free_cma:0 [ 351.098462] Node 0 active_anon:339012kB inactive_anon:756kB active_file:29892kB inactive_file:114508kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:164152kB dirty:240kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 351.128466] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 351.154409] Node 0 DMA free:15904kB min:212kB low:264kB high:316kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 351.180838] lowmem_reserve[]: 0 2800 3490 3490 [ 351.185569] Node 0 DMA32 free:811064kB min:38380kB low:47972kB high:57564kB active_anon:333268kB inactive_anon:20kB active_file:20904kB inactive_file:109648kB unevictable:0kB writepending:228kB present:3129332kB managed:2872032kB mlocked:0kB kernel_stack:3328kB pagetables:2956kB bounce:0kB free_pcp:2052kB local_pcp:1184kB free_cma:0kB [ 351.215635] lowmem_reserve[]: 0 0 690 690 [ 351.219906] Node 0 Normal free:11656kB min:9464kB low:11828kB high:14192kB active_anon:5780kB inactive_anon:736kB active_file:8988kB inactive_file:4860kB unevictable:0kB writepending:12kB present:786432kB managed:706992kB mlocked:0kB kernel_stack:10752kB pagetables:416kB bounce:0kB free_pcp:812kB local_pcp:368kB free_cma:0kB [ 351.249698] lowmem_reserve[]: 0 0 0 0 [ 351.253672] Node 1 Normal free:3092996kB min:42048kB low:52560kB high:63072kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3141280kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 351.281737] lowmem_reserve[]: 0 0 0 0 00:28:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) [ 351.285688] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 351.299200] Node 0 DMA32: 2*4kB (ME) 281*8kB (UM) 56*16kB (UME) 10*32kB (UME) 5*64kB (UME) 4*128kB (UE) 1*256kB (E) 1*512kB (M) 1*1024kB (E) 3*2048kB (UM) 195*4096kB (UM) = 810960kB [ 351.315937] Node 0 Normal: 0*4kB 35*8kB (E) 13*16kB (ME) 15*32kB (UME) 49*64kB (UE) 45*128kB (UE) 5*256kB (UE) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 11656kB [ 351.330723] Node 1 Normal: 5*4kB (UME) 8*8kB (UME) 5*16kB (UME) 3*32kB (ME) 4*64kB (UME) 6*128kB (ME) 1*256kB (M) 4*512kB (M) 7*1024kB (UM) 5*2048kB (ME) 750*4096kB (M) = 3092996kB [ 351.347335] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.356378] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 351.365101] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.374134] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 351.382846] 36415 total pagecache pages [ 351.386861] 0 pages in swap cache [ 351.390357] Swap cache stats: add 0, delete 0, find 0/0 [ 351.395888] Free swap = 0kB [ 351.398943] Total swap = 0kB [ 351.402109] 1965979 pages RAM [ 351.405247] 0 pages HighMem/MovableOnly [ 351.409249] 281927 pages reserved [ 351.412851] 0 pages cma reserved [ 351.458145] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 351.458145] program syz-executor.0 not setting count and/or reply_len properly 00:28:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:26 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1a) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) [ 351.638292] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 351.638292] program syz-executor.0 not setting count and/or reply_len properly 00:28:26 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0xc) setpriority(0x0, r0, 0x81) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xfffffffffffffffc}, 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x5}, 0x8) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x8001}, 0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000140), 0x8) 00:28:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) [ 352.054029] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 352.054029] program syz-executor.0 not setting count and/or reply_len properly 00:28:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f00000000c0)={0x6, 0x5}) 00:28:27 executing program 0: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:27 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x1a5) openat$cgroup_subtree(r0, &(0x7f0000000100)='cgroup.subtree_control\x00', 0x2, 0x0) 00:28:27 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0xfffffffffffffffc}) 00:28:27 executing program 0: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:27 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c616c6c6f775f4bed0d3382f878fee7c4e66f746865722c64656661756c745f7065726d697373696f6e732cfe656661756c745f7065726d6904a473c4696f6e732c616c6c6f775f6f74686572"]) r0 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x3, 0x4000) r1 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x10020) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80000, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) 00:28:27 executing program 0: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:27 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) io_setup(0xffff, &(0x7f0000000040)=0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x2, r0, &(0x7f0000000100)="0654ce5bcf31c77d939ff09aaefd6adf29669a365a82993872ba07985f6097f9ad3ad8f234912343360d30", 0x2b, 0x8, 0x0, 0x0, r0}, &(0x7f0000000180)) getpeername$netlink(r0, &(0x7f00000000c0), &(0x7f0000000080)=0xc) 00:28:27 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x33}, 0x0, @in6=@dev}}, 0xe8) sendmmsg(r2, &(0x7f0000002000)=[{{&(0x7f0000000740)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x40001c0, 0x0) 00:28:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r1, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x10) 00:28:28 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:28 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xad12, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0xe}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000000c0)={[0xfffffffffffffff9, 0x78f, 0x3, 0x7, 0x100000000, 0x401, 0xffffffffffff8001, 0x9, 0xc8, 0x7fffffff, 0x6, 0x3, 0x5, 0x7, 0xe7a], 0x2, 0x202}) openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video2\x00', 0x2, 0x0) connect$rds(r1, &(0x7f0000000200)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000180)=0x1, 0x4) 00:28:28 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x400000) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) perf_event_open$cgroup(&(0x7f0000000380)={0x5, 0x3c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0xfffffffffffffff9, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:28:28 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) [ 353.398994] QAT: Invalid ioctl [ 353.407124] QAT: Invalid ioctl 00:28:28 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x768, 0x0, &(0x7f0000000600)="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", 0x0}, 0x28) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0xf5b62301ca37c567) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r1}, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x801, 0x0) write$sndseq(r2, &(0x7f0000000040), 0x153) 00:28:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000000), 0x4) sendto$inet6(r1, 0x0, 0x0, 0x400806e, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) dup2(r0, r1) prctl$PR_GET_FP_MODE(0x2e) 00:28:28 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:28 executing program 2: r0 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000040)=0x1c, 0x80800) accept(r0, 0x0, &(0x7f0000000080)) r1 = socket(0x10, 0x803, 0x4) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b0000f4afd7030a7c", 0x12, 0x0, 0x0, 0x0) 00:28:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="01"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4dd7, 0x80) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000040)=0xffffffff, 0x4) 00:28:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x6, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f0000000040)=""/26, 0xff4d}], 0x2000000000000041) write$FUSE_DIRENT(r2, &(0x7f00000000c0)=ANY=[@ANYPTR], 0x7d49ad42) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000100)={0x2, 0x60, "9a762be8d3768e051fdf7c0b7b72a9f33ee629b21f89c81092b70a64de51d2cc9484e4a5ccacc7b8711c7f962f81c89c8e882ecc3d77696a5bdced8f9da7c38f59d99e1a2639fecb23480478fa4ba25d349d136c14055c1100b737021c1d4901"}) 00:28:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) r1 = dup3(r0, r0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0xfffffffffffffffb, 0xf82, 0x5, 0xf55fa88, 0x7f, 0x8, 0x7ff, 0x1], 0x8, 0x5, 0x2, 0x7fff, 0x2, 0x7, {0x9, 0x6, 0x1f, 0x1, 0x4, 0x5, 0xffffffff, 0x20000000003, 0x1, 0x5, 0x0, 0x2007, 0xaff, 0x5, "10eb28f578b542e311ab09a35839beb1a81c56483a734b52d1b272e6c1323e26"}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xf) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/70, 0x46}, {&(0x7f00000012c0)=""/83, 0x53}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x4, 0x3e) write$binfmt_elf32(r0, &(0x7f0000002440)=ANY=[@ANYRESOCT=r0, @ANYPTR64], 0xf62ac156) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendto(r1, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:29 executing program 3: r0 = getpgrp(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) r3 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x40400) r4 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x1, 0x2100) kcmp(r0, r2, 0x2, r3, r4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'caif0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="1d00000004000000ff7f000000000000ff070000000000000100e326cc8cf65d63000000000000bf"]}) ioctl$KVM_ASSIGN_SET_INTX_MASK(r4, 0x4040aea4, &(0x7f0000000180)={0x0, 0x7f, 0x0, 0x4, 0xfa0}) r7 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r8, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000240)={0x7fff, {{0xa, 0x4e20, 0x515, @local, 0xd114}}}, 0x88) ioctl(r7, 0x40084146, &(0x7f0000001f64)) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 00:28:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) sendto(r1, 0x0, 0x0, 0x4008000, 0x0, 0x19b) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0xc0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:29 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xd2, 0x80000) ioctl$VT_RELDISP(r1, 0x5605) r2 = socket(0x848000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x271b, 0x0, &(0x7f0000000000)) 00:28:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2201, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) ioctl$VT_WAITACTIVE(r0, 0x5607) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRES16=r0], 0x2) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x400000, 0x105) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000000)) 00:28:30 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100260002, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000080)={0x4, 0x5}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="491271b36b9cee5784c77f9abe9507f9", 0x10) 00:28:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:30 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r1, &(0x7f0000000380)='`', 0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) ptrace$setregset(0x4205, r0, 0x2, &(0x7f00000001c0)={0x0, 0xffffffffffffffc5}) 00:28:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) mknodat(r1, &(0x7f0000000080)='./file0\x00', 0x100, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400101, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x1ff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0x400, 0x440b, 0x8}, &(0x7f0000000180)=0x10) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000240)={0x10f000, 0xf000, 0x3f, 0x7ff, 0x3}) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xf) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x14, 0xf0ffff00000002}]}}}]}, 0x3c}}, 0x0) 00:28:32 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={0x0, 0x2, &(0x7f00000daff0)={&(0x7f0000417e08)=ANY=[@ANYBLOB="3c01000010000302000000000000000000000000000000000000000000000000e0000001000000000050bd852288000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000010000000032000000ac14ffbb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000001c00000000000000000000000000000000000000000000000000000000000000000000"], 0x13c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000040)=0x100000) r2 = dup(r0) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x1) 00:28:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000080)) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:inetd_var_run_t:s0\x00\x94k\x8e\x91\x11\x18\xebX\xf8\x0eq\xa0v\xbb\xca\xa9/\xc3g\"\xb8\xccF\x90*9L\xd5\x96n\x8f\xdc\x95|\xd0:\xbe\x81\x1c\xa3\t\xea\xa7\xfa\x86\x9b\x13\xe6<\x15\x92\xf8\x12M\x84\n\xff\x1b-\xc7z?\xd0\xccTK\x14\xabbq5\xb7\xcc\x14\x8e\x0fh\x8f', 0x73, 0x2) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) [ 357.338044] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 357.338044] program syz-executor.0 not setting count and/or reply_len properly 00:28:32 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000040)=0x1f) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @remote, @multicast1}, &(0x7f00000000c0)=0xc) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@delqdisc={0x84, 0x25, 0xc00, 0x70bd2a, 0x25dfdbfd, {0x0, r1, {0xe, 0xf}, {0xa, 0xf}, {0x5, 0xffff}}, [@TCA_STAB={0x4}, @TCA_RATE={0x8, 0x5, {0xe1a, 0x5}}, @TCA_STAB={0x4c, 0x8, [@TCA_STAB_BASE={0x1c, 0x1, {0x101, 0x1, 0x1ff, 0x8001, 0x2, 0x7fffffff, 0x3f, 0x2}}, @TCA_STAB_BASE={0x1c, 0x1, {0x40, 0xd4c2, 0x4, 0x100000001, 0x1, 0x6, 0x5, 0x6}}, @TCA_STAB_DATA={0x10, 0x2, [0x6, 0x0, 0x60, 0x2, 0x9d, 0x8]}]}, @TCA_RATE={0x8, 0x5, {0x8, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4080}, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000280)={0x0, 0xcf, "da1824615eee97d99db46065fd2d530a523f0b82d19bf3e469a983d74bd669ec773071d970dd994e41169cc343895ebf913f71927c52c3a2d47529acc86369657540c362f69bdf53b9dd9d4850fb2aff7b24c906a91a58eaa97b75f47b4a85b270f485b71256e42f3173d5e08f26e0ccfdbad03f6ea99fc3e69b2d242eb17f4a0e25cfd122a2ab92109929443885b9aa800b5e9b73c38030a56a60f917e6b2f8d0ac04f218832dc85e93a8a3fda528381a0ca4994c2f99c9c8c7255acf86dc0b9593f7b58f3c9724441029b9bf09f6"}, &(0x7f0000000380)=0xd7) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x3}, 0x8) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000400)={[{0x5, 0x28ae, 0x8001, 0x1, 0x200, 0x7398, 0x7, 0x7, 0x6, 0x80, 0x7, 0x9, 0x100000000}, {0x7, 0x1000, 0x3, 0x3, 0x5, 0x5, 0x9, 0x3, 0xfffffffffffff314, 0x9, 0x8, 0x100000000, 0x4}, {0x1c, 0x3, 0x4000000000000000, 0x5, 0x1, 0xfffffffffffffff8, 0x4, 0x85b, 0x10001, 0x5, 0x9, 0x8, 0x1}], 0x18f8ee29}) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x6c, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SOCKETS={0x2c, 0x7, [{0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r2}, {0x8, 0x1, r2}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x6c}}, 0x4004000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000640)={0x2, &(0x7f0000000600)=[{0x7, 0x3, 0xfff, 0x6}, {0x0, 0x401, 0x9, 0x816a}]}, 0x10) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000680)) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0xffff}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x801) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000800)={r3, 0x77, "d9be5bee53374624fddb3bd9205482e110c7dc37af693a4c1043427d86b3c9c6a4966467be7476a081d78f619c5bc73f36f0dcd995d3e2a2f5737b6528280434c289ac2c180eeb2613543dda628fb63543e568099f45199f360dd04c0c9632305748bc8833ffc613ea8502af72784bbcf21931e53df786"}, &(0x7f0000000880)=0x7f) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f00000008c0)=0x3f) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000900)={0x6, 0x4, 0x4, 0x0, {0x0, 0x7530}, {0x4, 0xd, 0x7, 0x9, 0x7a, 0x2, "9f9b3a9c"}, 0x9, 0x3, @fd=r0, 0x4}) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000980)={0x6, [0x8, 0x6f97, 0x100000000, 0x0, 0x1, 0xfff]}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000009c0)=0x0) fcntl$setown(r2, 0x8, r7) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000a80)=""/193) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/autofs\x00', 0x800, 0x0) io_setup(0x8000, &(0x7f0000000bc0)=0x0) io_cancel(r9, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x3, 0x1, r0, &(0x7f0000000c00)="db0a782b2b29bf52a143bdab4b638c17eb39cc7947813b66b93d8824fbe23229083d5b8d392ff5b60e44cb9ea0f3fcc0c96170b52a5dc44fcea174751148b15976f1410195c05b52673f0c74dab57beb5453c71c2a1f70d0771c01adecd51d88712ff8d52cf81b6478d89bf947c241593abc5a9d164a38ae494bf3380e0fe1e0b1724320beb15ba6ef74180a0fc0ad268addfd", 0x93, 0x3f, 0x0, 0x1, r0}, &(0x7f0000000d00)) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000d40)={'hsr0\x00', {0x2, 0x4e23, @local}}) r10 = mq_open(&(0x7f0000000d80)='/\x00', 0x40, 0x88, &(0x7f0000000dc0)={0x401, 0x80000001, 0x470, 0xfffffffffffeffff, 0x3, 0x9, 0x401}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r8, 0x6430) finit_module(r10, &(0x7f0000000e00)=',\x00', 0x1) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000e40)={r6, 0x4, 0x1, 0x3, 0xe2, 0x1, 0x2, 0x8, {r6, @in6={{0xa, 0x4e21, 0x1, @ipv4={[], [], @multicast1}, 0x40}}, 0x3, 0x1, 0x0, 0x4, 0xaa4}}, &(0x7f0000000f00)=0xb0) 00:28:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x8000000000000a) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:32 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x430000, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000040)) r1 = msgget$private(0x0, 0x220) msgctl$MSG_INFO(r1, 0xc, &(0x7f00000002c0)=""/4096) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001380)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000014c0)) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000013c0)=r2) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x9d, 0x44000) getsockopt$packet_buf(r3, 0x107, 0xc, &(0x7f0000000180)=""/240, &(0x7f0000000280)=0xf0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001500)='TIPC\x00') ioctl$KDMKTONE(r4, 0x4b30, 0x3ff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400600}, 0xc, &(0x7f0000000140)={&(0x7f00000012c0)={0x68, r5, 0x120, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x0, @link='syz1\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x0) 00:28:32 executing program 2: seccomp(0xfffffffffffffffd, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x45, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) mq_unlink(&(0x7f0000000000)='\x00') [ 357.971975] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 357.971975] program syz-executor.0 not setting count and/or reply_len properly 00:28:33 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x100000000000005) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in={0x2, 0x4e22, @multicast1}], 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x2000000, 0x0, 0x0, 0x0, 0xd}, 0x98) 00:28:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="3223d9f2b8870f8ee82e65140abad004ec0f3066b93b02000066b85400000066ba000000000f30b800008ee8f40f3802ea", 0x31}], 0x1, 0x10, 0x0, 0x0) 00:28:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xfffffffffffffffd) ioctl$TCXONC(r0, 0x540a, 0x7fffffff) [ 358.551590] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 358.551590] program syz-executor.0 not setting count and/or reply_len properly 00:28:33 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40001, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[], 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)) 00:28:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:33 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) write$apparmor_current(r0, &(0x7f0000000180)=@profile={'stack ', ':\x00'}, 0x344) [ 358.925791] IPVS: ftp: loaded support on port[0] = 21 [ 359.040959] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 359.040959] program syz-executor.0 not setting count and/or reply_len properly [ 359.146149] chnl_net:caif_netlink_parms(): no params data found [ 359.332642] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.339282] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.347883] device bridge_slave_0 entered promiscuous mode [ 359.383362] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.389945] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.398664] device bridge_slave_1 entered promiscuous mode [ 359.460483] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 359.473299] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 359.507545] team0: Port device team_slave_0 added [ 359.516680] team0: Port device team_slave_1 added [ 359.707567] device hsr_slave_0 entered promiscuous mode [ 359.922720] device hsr_slave_1 entered promiscuous mode [ 360.057021] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.063699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.070971] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.077675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.174972] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.187573] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.220209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.245077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 360.253183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 360.271179] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.288742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 360.298367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 360.306879] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.313464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.334832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 360.343911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 360.352267] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.358794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.380297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 360.408369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 360.417937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 360.427141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 360.459127] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 360.469057] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 360.485026] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 360.493577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 360.502702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 360.511526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 360.520105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 360.528900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 360.537244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 360.549227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 360.595073] 8021q: adding VLAN 0 to HW filter on device batadv0 00:28:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000000)="360fae08670f01d1b8c80e8ee0f2a566b9af0300000f320fc75ac70f019af5ffba210066ed0fc79e9c5ebaa000b80118ef", 0x31}], 0xaaaadf1, 0x14, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000001580)=ANY=[@ANYRESHEX=r0, @ANYBLOB="3555d89db97a96d7f34ddef405f2226dc1bdae54b58271186af489cbc904602d2324c0ea00b8b2e018b69185e55c1bac1db2b8ac83c163337ac130a95e364f43d746a0ba347dab778e1906eebb455e07c25d32ceddef83ecbfc3f1df736978571a91f658ce13a3", @ANYRES32=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRESDEC=r0, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYPTR, @ANYPTR, @ANYRES16=r2, @ANYRES16=0x0, @ANYRES32=r2, @ANYRES32=0x0, @ANYRESOCT=r1, @ANYBLOB="f8c4aa7ea8ff657011c8ea1b9e9a38ea7cbd69738a5a3fc4655abdc678afdc010530ffb03160a7c5a6e9ae7861dea54b6554a34901930b74209d0c336d28f27a4062a363bd5733e814fa66a9206e75129a4d5537a5c117ddb67c650df866dff35affb4fadf9b44f83bac1707dbcbac13f8ca87de52acc6951ad830", @ANYPTR64, @ANYRESOCT=r0], @ANYRESOCT=r2, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYRES16=r0, @ANYRESOCT=r1, @ANYBLOB="11499764ff129bd70bd06508bc37a01f2efb59d91fc15286b9c3cb24190f1853f0dffee919402dc7a1589d92aa2e847688e6d196406c54d6e8c4d1cbdb6b049317ed6e3f2f97e279dd535f67bb0397a1d4eed5a80da6303aa6a3597b43332bb791c5dba6ff39304342baa06e537e471777d104821458f2884c04ce85832dfb5592632a4c58780f286a3662299d17e131b3fefb0829d7b0c0000e25b864efd901f0d5d449290a5fd653066524ad2edb7bbf08162b5e29a8cfc624d1e883499590807d0f85e1ee976b21af97cc3c0164d6c1ee3b1d46b5d8eaca889c97d6098328cb86b9bc77bc38c8b40bcc87dea6d2d227857329e5f3a842a48c530a2b71979c300bfbeda26913fd2febe996d1b6a595a841d889ec0e8a2ce850e5bee80a536ff22cfc1adab509421bab545578a95a9dd67d7e23ae52bfd7bb84bfd3e882cb3df01ebec4e41e6059c90a3292898abfb9168806d834b962ab7e3e80828c7bee985a87cfed5e9f2c1696c250772efcdfaf79f4f955682fe28e7a92fd77b4f4387c952349929c1b47adcdab0c90e2b5fbd9451650ea104a588291e38e7cba9470b04457feb2bdc814800abbdf024e0562a8fe12ac71f4cac963375da1a3b253c101f4270d5a15aaa368bcb7a0caad2dc83d90e5ee214dcc0a36065a99148aa675ef3100b2a177037c5199a78aa1c8d6bab489724b5fa625349aa6595632dc81efd36633f993c7f126166b9707936cced455f364f310e70812336ca5fd83e427ee4b57bf1e8e06521c8292c74340bd9d04330b362438c6f1bce50ec7be4c1fff87ac4a9d1399fcde4e0898ad58c1e53b8ecf0594cdc2d83189934f02fac99c6cdcd102aeec05ebd0906e7be3473cba2d9b1d93b461eeafb025e5d961e66a86464fd08e78de129595f684e61825a7a5386ac16266ba8afef1f22f719e77e8fbe64912c7b3567f81f2c335d5f04b4a805235459f1aff0c59ee02bb23643723357abdf36dd9b8abaa240d0c1dd7ccf522f96b39d3f8aa21b20832f06d8a3c23f7a8835aa0ba32469a5cf4756d6883362c6cd829ed2c09dc7827c37c5fbf60ee91a2d7aa895dbb746a05fb88a00c7e0360b8fdaedc7c5e57bd70c0ed3a3d7f8add025f54d203e9d5fe7f7434e304713a8448feaf3992dd6444de3ce60b2f5f1a4a40c6d0b9c4f39cf4ffba70f0db4f9df2f2d1ae31bdc7f88ca421f394ecb884327dd7bfda00816f2beb2fb97f3899cc8042018412db37d91475fc79be61a12f470d9d8d4990ce3ba3b9f341902eb75e13e0e4264d0d9b8c64556db208a5eb0d2970765be0202b9ea95e4bbc3aa3300072bba05f9bcd8c8a39e49d41745573d7c66eeb90cc6e075eab8604997d74db651f152936e8672e20da8cb2879e1b4f81e95b76005c1d8a463cf9b5009b7a1b1fd9f282c871f1a54290f2df8658fbe53eca9c1c1d80ebdfc6a48da7ce383ec1aef4f34ad5bd36ceb03e346933e642b0305722b9f2d6e9d6740260d97ca5db072db8a63fef39c02436a109b57b8e7c18fbe1f9372fafec335468c02fd68e95d127f104f44f42052499c1299961ca470d2c1fe2c537e22a518fe9b3bb8d8a9b80255306d3cb23ce1069783e1f9b5e7dbc7df46e8d584430693e2c30f88f4002a15ecd4b40a8c46ec9952d609e01094f7ad65d9a8d2ec460a6976bb35d05606166d049b8407bf0ade203cf33f29abe356dcd6d4e8da30d88d2775ac9521925bb922d05618b7f442d5cb70ed16bdefa64de61ac6fe6b8aec679c4b6d11199a0c3c3f4ba541cd86716a789372e29279e126217062305497cc77126355428b577a346669000e1bb3780f739b4a749cb326f62f729b1e7b7af75e179d54c40860bb237d229c25b8cea810a897c34504607e2ffffd53b01e0aa6b07bf93967e22e411b34467b923245cb9c8ac7c2c3d8f96ef8462c9c8af7eadfe798f9fbcb23a6d484b6ee41c91a2b440820effa9a0f6cb0a265d27b25ba6ce0ca30fe9ec73029fcfb740c6f21dc7eb2195ad1c691704bea01ceb9f931cfa6db70abe95e8d18edd59ed6dc82f49beec8b58333c8da6f2f118e5994e21771a7b721d0eeffeec71d35801ee0f6fd39f7e4562e6ed5742117bc6ebda3aa2eed50f136900700112fc0cb1c2f142919533c54953de192384193e8bd1ed6530affcf992b451e782ea63cbcf13d5d3a782a0160852aa0bd3969d0aea7b0cd57b90ae2a3fdea2bfb941c7400ed5810d52e8cf1ede96bc0587d4dfa25a33202d9fc3b8a975c847833235ecc12301d8f1580372d14fae98b1721cd61ec94f7ee184d6a3103b7f6d3a24fb75ce589e7956139e6cb47bafb8c308f0987d1e78a2909d0e688b8bb5856fd82645d1d337de0467a29567f34345189e68017eb8cb993afd22cdb31f76fe6e4c3fa5998fc80df093e25fff9151cbe82e499bd6eb850c508e672be93e1a42e6f71a318e713d38a021ec9be88cdb954d0e9a4aee8fd5f55c9dc718cfe8838e17e6e683131c25b8257b4ab243d9a997600f031b4c8788208ccfbf59946be0bf917729e47ba55c1ba5a5aca0a9dc968484da1da998389d8024604a9029e980ad735eecbb589d17806d61fad5dc86f6ec732a973b2b1e6f82f0f30a969698a34c8e162074a3654fee7549782acf51fe0076ac5ad3ff243a08fbf7a17f3a4276e3ecda27937a6430e07ec3400d240774341583ef2ee53050c72a3dcb4ee296f48405038ffb4ab4f0a265ec2af9e9961432bac01f2d27d0d20d1a05484d016eb2d6db96c14c1332fc33525d227e867bccf22aabdcd6951ef291d6a0128f5d7920f1889a69b7e321596929e2301b6c6c4d1aeb87ede53bb4cf65ebfbc8bba78b9bc482c0103a1aa6d09ce87a64b33a6596a0f72eeaa5243008c44c4276b86a4e973e7f319ee07539f5514fd68eace5ed9f1c4c386a1bfd603eaa3c1dc02812c7ea8583704bf1019a26aceff7ffc9d68bcf6e04b66f6781447752235c360ae9458767ee8627a3edee10b2138626d0e0ea76bd6f12305fff7452b41e244672bc84a2e583601025a312f90daf7e98b8888ced81b68277327ef571055c0f716a4c02aa34ed564b303cbbb15d1a120dea2c7852fa0cd9e331557ed51d4229a4d46eb2de9865eface15029a8c3651e771a9daf066449f86de01662b0ddb8290132ba06e906162621aa2f339749a5750dc70b0d32e4f97832e6d55cc4ea06384abca622f1bcf311cdbeb87393d4cc8e912faeebd1b463eac18ff2e6400b990a4818d2b06305ed37d48435ec3ef8582ea17549bc1a7f6cc9cd74ccfa4545dfb70277eaff2f85136769f88d3b99dfcc29b8a8b4ee5c38931ebb3a80d790834ab70fcfb25919e654ea3a8384a7fd9dce6e0f7ae492dde777f2a2732b760e9c81d3dfbb3bc0aa083498f7ac055c90f75acbc5f04e530826bfa00aa85d40921e6ef90ec1a1093961dfa33ed0d09576df6657e54df143ef1d5f8492764eab3da25024a9a482cfc4e0112d4e8696a46c4a67bb5374256cb25444bfc3ab058b31a4bb079eb25d1393f33e718ce74546432fa1f837253a2f3bfe8a065407da7ffac28771c3ef5e009137e889737d9bc6ff2ad630313452bb55ab7d123ff48e8b80aed914db929d60c1ac4b2536d4c1ee199269bc89cf949ea28eb0c90d69a2277e14996bbeffef6aada219d681b09625636f2710d26ee4371a1b0d014da5ad5da085db95e45f3450b2def8a458d5e1517378feae6a4a3448fa10153f8f5eb48d6b49df44267ac87bd05c1915d317ac20c85e730f7fc4a8daddf7409fb3f40c4407cc141af3d7b739d88c970b920b4284ed82156ec3e44c71773d174f0bc01548e8993c9d62ce9378abdea4862880655f5e502877f5898ff98c34f3428c4dfbe8598b6fae2d10f8c85235b554e466beff99e02253bf263e4a954975b6a30addb64b9f3e12638428e4632854d53690c28cdc14d5955bf068b0fa9e10cbbbc9fb70e441537b059fe63053bb9a29f4901e374ee6cc512e7842a4c50ba4b8054c3771ccd2bc6aef43d67da5b9b4d2733c9c3971238aa632ca0c214fa71b4cbc570d5a0f69a772cc7991d5f40d2ddabf061941316d136cc4924b050416c9ba334abb215d0d8347c73dfa974de847e9c3c44af285c47881ba7036e2fb3d26e6899f11f265a81675876ac4d860f15eaa98412fa623d4f6ccc2a7c513716caa524612e3d2083739253d753e6658cc2852d3906712e5b6074b174661706022d146f953f673fcdf230832314a3901c1cdeaee92aa8be0b356349e7b6301ee12d6bffd42a6501d07da3114602f77ab75edb48674a05396b2f7246055c81802c2ade64c853c002e2d397e39debf2d910ccb5e51526d68bb4cfca6ef2a0c9884987a5dd5f91b4fdc0aed6a038c8cd597037c31a04a927ba06dcaf4902972117b2fbf08d94ebc97fbf8954e9690ca9e5837308ec9571d0c84e69ad8a71f35e781711f6ccf4e919aef0a82efff61f30cb24f3cff8ff539d5b4c6c90c175bdc9d26feb2555265ecc9071f2f3780a9dbe3851513a79720c574618db8e9e46ca1def36ef2ac4f459ed02bfe69da2cf7f878f26a1102282864564b07e6a46f72be39776d0bb8b0871dd35cc5fb2ec5e0c132cd7937a45ea673bfd26fefa3cdda0b2730416080dffbd6b158f5ce490c55b53b8d861e68cb3fc793d333759d1661d1a7b5c3c5f8749bbc88edd24f59f3f4cd73f7a648d567b1e49a5157a42e07c8d74c61854e58ac4d3ac6f42bfa2ab7e8f25ece3aed5fc493f9b430fe5dad9142d6211f0db9203b7e01de1bdf802e78b90dd53acf04f6989cda98acd18df03eff41c43c6902ec58c5c8014dd7629f788e4f89a21c9b14fced86e080bc5cb1674106b8185708414bc76705a77131b84fedd88156dad02592ef9f5dec92c562018ccb2a8ba061d0fea47ad5de08008562764296ec2048b2b26987cf3e3f6a2d6d77fcfc8fbb24444de44ac163ce4eade26a0a0c21be56cf7cfb7aa397d546b59efcc2bd6ff35fc1436f99d967e8e4770d92b26c188febf8c10fa1f9854ec290f1d26927a838d8657bae12d0cb0d59b31355c82a73dd159888dbaea23ff51d669f54642d96c8ed42295d24e079745fd65f5202d80d2e6f3cea57d81b7a4a6098a61ae9e171a4f9eaa26be417bc0a30710dc0b981970cc14094dcd297901204e18340d21098e7b6507bd49c08c5e64fc7cffe2cd3d007c8543ec52d834d4a7e52ca8526d4221d7a700d183d62ea6e26603df4179dbc9488a98cde4208737265c2e2c2ff53b016e2aa744e879b5682e05cf2cb2a2461bc2f2a271cb0ffbb79e1a8a4985dc3070c8d1701430377dac02e698f6184ae4ccbbab43a86b9fe872ddb6508be07300ad314a93469c481c2c60cc65f79e048d2839bf6e109e4fb671fd1c9e3af70a6da0b3b3b3e60dfcdf8ee29ef88e94a5c91b93b018ddf055ed7b1b1c825d18e3f977f96c61fa5ae0a683a23e347618631a6cd6d4be99d1cf74f69182cb16b7933196eaf4e37c008301148946cee5b5677688f0cc52a6afeb74a31a846d3df676f445c0536db5164bf69df6bf7d551b4c9b6e0bc1d015f6eed5f6a14578fa64b8e581f5f75a1798c21ae4775353abde3f40e0f7c3e0407cc6d61471bb7a2131637ab76b5c4278dbc5de7f4a1dd7bef983923b50c7a464ee6336ce3731f5b3490678e64a887f0f01dfed71e195936f421ffe0a3208a0587238433367196ab951a9c06540d067ba18c616fb9e62b53e13f5d0adbf9a699d3c7b11388280e532ba46be834549a9b5cdec30468a4343f25", @ANYRES16], @ANYRES16=r0, @ANYRESHEX=r1, @ANYRESHEX=r1], @ANYBLOB="17b6fe88e5d7a1682d265f93332fddb0feee4e12c2994845e0aef0c2e0091ef625068fb0bb827783e034e026be64d892c20567715dd9ba8e7fd3d9863e5782feb041f487733d3acac5a3e4bb9b9b09db4d59f48e118af3a4b587460a4c3a7e4a92a423e67b2640e862bf4074a9927f59bdc85c4acc7a94066c0fe01b50249f559908fa1fa9e81e897891b829785c94ad446db74aa0f9244d70ecd6241e4eff3020da06874fe357ac1abbab421d8807616e57b8e64d1e746b495570e4de5cc8441c5a132ea242ea0df25a96af8ac233d7318efd99e5bea900d4", @ANYRES16=r2, @ANYRES32=r0, @ANYRESOCT=r1, @ANYRES32=r1]) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:28:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x3, 0x1, 0x9, 0x1, 0x7be1fc78}}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000280)=r1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x5, 0x0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000180)=0x4, 0x1) connect$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0xffffffffffffff7d, @multicast1}}, 0x1e) 00:28:36 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) fsetxattr$security_smack_entry(r0, &(0x7f0000000080)='security.SMACK64EXEC\x00', &(0x7f00000000c0)='\x00', 0x1, 0x2) clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa1f3ffff) 00:28:36 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000180)={0x80000000, 0xaf, 0x8, &(0x7f0000000140)="233ec015ddbe8ebe"}) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xffc0000000000000, 0x80000) write$FUSE_BMAP(r2, &(0x7f00000000c0)={0x18, 0x0, 0x8, {0x100000001}}, 0x18) syz_open_dev$ndb(&(0x7f0000000240)='/dev/nbd#\x00', 0x0, 0x2000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r0}) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'bcsh0\x00'}}, 0x1e) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 00:28:36 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:36 executing program 3: mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0) r0 = gettid() r1 = syz_open_dev$vbi(&(0x7f0000000680)='/dev/vbi#\x00', 0x1, 0x2) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f00000006c0)={0xffffffff, 0x10000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$int_in(r2, 0x2000000005452, &(0x7f00000000c0)=0x3f) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000000000002000000000000000"], 0x24, 0x0) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0) recvfrom$unix(r3, 0x0, 0x0, 0x0, 0x0, 0x99) fcntl$setown(r2, 0x8, r0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) getresgid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0) fstat(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r5, &(0x7f00000005c0)={0x96, 0x7d, 0x2, {{0x0, 0x7b, 0x9, 0x7, {0x0, 0x0, 0x8}, 0x200000, 0x3, 0x100, 0x100, 0x0, '', 0x18, 'system.posix_acl_access\x00', 0x18, 'system.posix_acl_access\x00', 0x18, 'system.posix_acl_access\x00'}, 0x6, 'vmnet1', r6, r7, r8}}, 0x96) ioctl$LOOP_CLR_FD(r5, 0x4c01) unlink(&(0x7f0000000180)='./file0\x00') fcntl$setsig(r2, 0xa, 0x12) r9 = dup2(r2, r3) setsockopt$EBT_SO_SET_COUNTERS(r9, 0x0, 0x81, &(0x7f00000007c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x7, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000240)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x20) connect$inet(r9, &(0x7f00000008c0)={0x2, 0x4e24, @local}, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f00000002c0)={r10, 0x10001, 0x401, 0x6, 0x2, 0xffffffffffffc92d}, &(0x7f0000000300)=0x14) tkill(r0, 0x16) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x0, 0x0) time(&(0x7f0000000900)) [ 361.081587] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 361.081587] program syz-executor.0 not setting count and/or reply_len properly 00:28:36 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xffffffff80000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) userfaultfd(0x800) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @mss={0x2, 0x48d}, @timestamp, @timestamp, @mss={0x2, 0x40}], 0x20000000000001be) r1 = getpgrp(0x0) capset(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000080)={0x7fff, 0x0, 0x1000, 0x26ee2e76, 0x80, 0xffffffffffffff01}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000280), 0x4) [ 361.370409] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure 00:28:36 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x8008000000000d) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) modify_ldt$write(0x1, &(0x7f0000000000)={0x81, 0x0, 0xffffffffffffffff, 0x7, 0x3, 0x50, 0x7, 0xff, 0x3, 0xfc4}, 0x10) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x10000, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$P9_ROPEN(r1, &(0x7f00000000c0)={0x18, 0x71, 0x1, {{0xd0, 0x2, 0x8}, 0xa94}}, 0x18) ioctl$VT_RELDISP(r0, 0x5605) sendto(r1, 0x0, 0xfffffff4, 0x80, 0x0, 0x0) 00:28:36 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:36 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="07087e77ff", 0x5) r1 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x8240, 0x80) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000001c0)=0x10000001c) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="3a60e8841297827c871b0b0cec754f3cc052f17ac1fd71baa07ddea3b1fdc3d62f0bb39efe40a5d13da6b37ca8c2617089b314b8eb428267789c127b766c0a8c2adaa15ae3201433c0945cded86a8d6cd36b", 0x52) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x61, 0x200400) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000140)={r3, 0x3}) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) fcntl$dupfd(r2, 0x409, r2) 00:28:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000240)={0x80, 0x1, 0x200, 'queue1\x00', 0xfffffffffffffff9}) r2 = dup2(r0, r0) clone(0x6102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000040), 0x2) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000180)=""/157, &(0x7f00000000c0)=0x9d) 00:28:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x7, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x9) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x3, 0x4) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f00000001c0)=0x3) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,') sendfile(r1, r2, &(0x7f0000000080), 0x80000003) [ 361.636377] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 361.636377] program syz-executor.0 not setting count and/or reply_len properly 00:28:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f00000000c0)={0x0, 0x5, 0x4, [], &(0x7f0000000080)}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cachefiles\x00', 0x111080, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000140)={'nat\x00', 0x73, "1cf8b3c758cd2a7f2a3497ea169594b261a2c1b6a6c527b22bd29d4c1be1e799455230ffb0c2e26a391d366db8c891bc963cb319141ee11b78c408093d99184f2f23f497d4ac1b958637138fc64bcdfc07cd0a3cf4033d3a69d21d2f96711a53cf090e0ea1f0bcc28b189e35800067b35eb0bc"}, &(0x7f0000000200)=0x97) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0d00000000000000000000000000000000000000ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000d86c000000000000000000ffffffffffff000000000000000000000000ff020000000000000000000000000001ff010000000000000000000000000001000000000000000000000000000026a3dd4783e900000000000000000000000301523d0a888db80000000000000000000000000000000000"]}) 00:28:37 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:37 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x6001, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000080)=""/74) 00:28:37 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x2, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f00000001c0)={0x0, 0x401, 0x3f, &(0x7f0000000080)=0x9}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f00000000c0)={0x7b, 0x600000000000000, [0x0, 0x0, 0x40000106], [0xc2]}) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4068aea3, &(0x7f0000000140)={0x7b, 0x0, [0x3, 0xaea7, 0x7, 0x614c]}) [ 362.238306] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 362.238306] program syz-executor.0 not setting count and/or reply_len properly 00:28:37 executing program 4: r0 = socket$unix(0x1, 0x400040000000001, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40400, 0x0) r2 = getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000040)=r2) bind$unix(r0, &(0x7f0000000100)=@abs={0x1}, 0x6e) listen(r0, 0x0) pselect6(0x40, &(0x7f0000000240), &(0x7f0000000280)={0x1}, &(0x7f00000002c0)={0x8}, &(0x7f0000000300)={0x77359400}, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) 00:28:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000100)=0xcc) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x220302, 0x0) write$smack_current(r1, &(0x7f00000000c0)='/dev/ptmx\x00', 0xa) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) sendto(r2, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:37 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x82001, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x2) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r1, 0xffffffffffffffff, &(0x7f0000000040)='\x00') r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000000)={0x35, 0x6, 0x100}) 00:28:37 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:37 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x408000, 0x0) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f00000000c0)={0x2, 0x5d7e4718, [{}, {0x5, 0x0, 0x80000000}]}) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x20000, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x201, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r3, &(0x7f0000007e00), 0x1bb, 0x0) 00:28:37 executing program 4: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mISDNtimer\x00', 0x200, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000000)={0x45a1d093, 0x102, "cab674275a08e1c939da0a9f3a6adad88fa9f6e2ae7c06740ace9b4b978bc991", 0x404, 0xfffffffffffffff8, 0xff, 0x3ff, 0x104}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001440)='/dev/sequencer\x00', 0x802, 0x0) read$FUSE(r2, &(0x7f0000001480), 0x1000) r3 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x20) inotify_rm_watch(0xffffffffffffffff, r3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x800, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000100)=0x32) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x804, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x40, 0x0) dup3(r0, r0, 0x80000) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x800, 0x2) ioctl$TUNSETNOCSUM(r5, 0x80044941, 0x709ffc) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f00000000c0)={0x3, 0x10000}) [ 362.822607] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 362.822607] program syz-executor.0 not setting count and/or reply_len properly 00:28:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003dc0)=[{{&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @remote}}}, 0x80, 0x0}}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key(0xffffffffffffffff, 0x0, &(0x7f0000000180)="70b179891ddd88b4c00ea679d131ca9918ad5062ded382cb7f7bd95407acc58968d4fe7a41710fbca761cf8289278ccc9645", 0x32, 0xfffffffffffffffb) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000800)=0x3001) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:28:38 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000ec0)={&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000000), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000d42d804e2cdf987000c00000000000000000000001800000000000000140100df0b000000000000000000004c6b7ed85b8fa20b8a74e5d68d00"], 0x30}, 0x0) 00:28:38 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) [ 363.199048] Unknown ioctl 4726 [ 363.301607] Unknown ioctl 4726 [ 363.335745] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 363.335745] program syz-executor.0 not setting count and/or reply_len properly 00:28:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) socket(0x5, 0x0, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1ff, 0x80) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000080)) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000100)={0x101, 0x81, 0x3, 0x505}) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f00000000c0)={0x2, 0x9}) 00:28:38 executing program 2: r0 = socket(0x4, 0x1000000000000004, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) accept(r0, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @local}}, &(0x7f0000000080)=0x80) 00:28:38 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_proto_private(r0, 0x89e6, &(0x7f0000000040)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x840, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, 0x5}, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) 00:28:38 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x400200007fe, &(0x7f00000002c0)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRES16, @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYPTR, @ANYRESDEC], @ANYRES16=r0, @ANYRES16=r0, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYPTR, @ANYBLOB="7b053f1dec5cf328eba7c7cafffdc944c58f623ab53484d292b9d00e5b53f5298551cb10f148f1676b87c44ff090a36ec71255cd6161ab0d1228fcf20d75d763e0e68d3eae9be5798e34812b387cb12456eca6068358e72cebd998b096e4b68f53eb842ed15c552ad6fe418583367c87b270d342405bf4dfd8e1296b35de4a7d8e0762a669d230d8414f5a63e1e4c3fc363cf8ff079bcf5c297ba71238c34d84ceb7a04ea32883864b499c39e2a7ade79153f0047083346ebaae087c4e5a46d9491700e23d19590af66ea5c465631415f6b98fc5ec8b98fa76", @ANYRES16=r0, @ANYPTR], @ANYRES16=r0, @ANYRES16, @ANYRES32], @ANYRES64=r0], 0x10000015c) shutdown(0xffffffffffffffff, 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x8034, 0x31010000}, 0x100) [ 363.968904] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 363.968904] program syz-executor.0 not setting count and/or reply_len properly 00:28:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000006580)='tls\x00', 0x95d59845436eab44) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x42440, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000001c0)={0x2, 0xffffffffffffff9c}) connect(r0, &(0x7f0000000140)=@un=@file={0x0, './file0\x00'}, 0x80) sendmmsg(r0, &(0x7f0000005f00)=[{{&(0x7f0000004980)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001500), 0x0, &(0x7f0000000000)=[{0x18, 0x11a, 0x1, '}'}], 0x18}}], 0x1, 0x0) 00:28:39 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x20, 0x101002) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x82002, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="6d616e676c65000000000000000000000000000000000000000000000000b125be4b0000a6000000ddcf64c1117e33c855c6ec2ddfe25bae8ef7898871cfd6d49071f4fe543702000000afd49ebc49b5f792e147344272f1623745f26683fd3db86dd4d4dd0cb75aa6efa46ca716c8e38d1a62c39b6917d1b61bde2685dce4db330b1e7b9d464fbdcc60abe714e880a2c6c8ac545f4ba81588c033eabe042c85503998fe7f836c6fea7b57b9000000000000000000000000000000002cc2f9444856d153d4c34d585b47f1fbea4db0bc63660c1b84bda4bf5f3226120000000000000000000000000000"], &(0x7f0000000040)=0xca) signalfd(r2, &(0x7f00000001c0)={0xffffffffffff8106}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(r0, &(0x7f00006f7fe8)=[{{0x0, 0x2710}, 0x1, 0xb8, 0x400000002}], 0x2a4) 00:28:39 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:39 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) unshare(0x400) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0xb94, @local}, 0x1c) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93) 00:28:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0x12) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) [ 364.306126] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 364.306126] program syz-executor.0 not setting count and/or reply_len properly 00:28:39 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000002c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x10001, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1e, 0x50, r0, 0x4000) 00:28:39 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:39 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x801, 0x0) pread64(r0, &(0x7f0000000180)=""/252, 0xfc, 0x0) [ 364.695566] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 364.695566] program syz-executor.0 not setting count and/or reply_len properly 00:28:39 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x2800) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)=':\x00') mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0) 00:28:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:40 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x10200, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$evdev(r0, &(0x7f00000001c0)=[{{0x0, 0x7530}, 0x3, 0x1000, 0x6}, {{}, 0x12, 0x7fffffff, 0x81}, {{0x77359400}, 0x17, 0x7ff, 0x10000}, {{r1, r2/1000+30000}, 0x11, 0x2, 0x3}, {{0x77359400}, 0x3, 0x5, 0x8}], 0x78) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2002, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xbfe, 0x0, 0x9}]}) sendmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="5500000018007f1412fe01b2a4a280930a060b7700a84306910000000b00020035000c00060000001900150002000000000000dc1338d54410009b84136ef75afb83de4411001600c43ab8220000060cec4faba7d4", 0x55}], 0x1}, 0x0) 00:28:40 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:40 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x10800, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000040)=0x1) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) io_setup(0x8, &(0x7f0000000200)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) 00:28:40 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) unshare(0xa010000) ioctl$VHOST_SET_VRING_BASE(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x2}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) ptrace$setopts(0x4206, r2, 0x7fff, 0x24) [ 365.204321] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 365.213763] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. 00:28:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001400)='/dev/ptmx\x00', 0x400046, 0x0) r1 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)="24104f35e2ef1659f9813f7bdeb628ae25a06f7ee6736323c4926fc3d4d82fb91607ec6cff3f8b245da2c2de0fffc8a4f8e6d22f", 0x34, 0xfffffffffffffffa) r2 = add_key(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)="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", 0x1000, 0xfffffffffffffff9) keyctl$unlink(0x9, r1, r2) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001580)='/dev/vga_arbiter\x00', 0x4a240, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000015c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000ff000000"], &(0x7f0000001600)=0xa) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000001640)={r4, @in6={{0xa, 0x4e24, 0x7, @mcast1, 0x5}}, [0x9, 0xff, 0xfff, 0x277, 0x100000000, 0x1ff, 0x7, 0x8, 0xa6, 0x7, 0x1, 0x3, 0x3e3, 0xffffffff80000000, 0x800]}, &(0x7f0000001740)=0x100) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)) geteuid() ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x16) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000017c0)={{0xa, 0x4e21, 0x200, @mcast1, 0x25e2}, {0xa, 0x4e20, 0x9c2a, @ipv4={[], [], @rand_addr=0x7}, 0x7fff}, 0x5, [0x9, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x8, 0x100, 0x2]}, 0x5c) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x107) r5 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x4200) write$vnet(r5, &(0x7f0000001500)={0x1, {&(0x7f00000013c0)=""/13, 0xd, &(0x7f0000001440)=""/152, 0x2, 0x1}}, 0x68) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000040)={0x8, 0x2, 0xd1df}) keyctl$describe(0x6, r2, &(0x7f0000001380)=""/56, 0x38) syz_open_dev$binder(&(0x7f0000001840)='/dev/binder#\x00', 0x0, 0x802) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/capi/capi20\x00', 0x8040, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000001880)=0x7, 0x4) setxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x3) getsockopt$inet_int(r5, 0x0, 0x16, &(0x7f0000001900), &(0x7f0000001940)=0x4) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000001780)=r4, 0x4) arch_prctl$ARCH_SET_GS(0x1001, 0xd) [ 365.333736] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 365.341340] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.4'. [ 365.359646] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 365.359646] program syz-executor.0 not setting count and/or reply_len properly 00:28:40 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x10800, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000040)=0x1) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) io_setup(0x8, &(0x7f0000000200)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) 00:28:40 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x8000, 0x0) r1 = getpgid(0x0) syz_open_procfs(r1, &(0x7f0000000080)='net/unix\x00') ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000880)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:\xa3Z\xff\x03y\x9b\xfc)\x00\xbb\x8d\xac\xacva}knh#5\x8cM\x141\xaa)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe7\x0f\xe7\xd9$\xce \xb9N\xae\xc9\x06\xd3g@\xe1\'s\x0eV:RF\n\xc1\xf9\xf1\xeck\xa1/\xe3\xc2\x80M]\xf0\xac\xee\x9e\xdbL\xa9\xfa\xc0x\xe6\xb2\xe8z\xbd\xdc\xf4\x90\xb0\xbcq\x9e\x99Tu\x1c\xf6u\x8bYZ\xac\xa4=\xe4^sz\x96!.A\x88O\xae\x06j\xafd\x00\xcc\xe64\x92\x7f\xf7[\xc6\x91\xfd\xf0\xd2\xf1|\x03{\x91]\xf3\xfc\xde;\xb8\x0e\xad\xa51[\x1a}L3\f\x96\xe8n^D', 0x0) write(r3, &(0x7f0000000440)="b1", 0x1) openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x2000, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) 00:28:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$TCFLSH(r0, 0x540b, 0x3f) 00:28:40 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:40 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f00000000c0), 0x8) name_to_handle_at(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="7700000006000000b8d337db65ce206326fc64c491ddccf38aeacbdf6ea9df08017be234f3ca6a6858990fecf15176fcd6c7a80cba8a3ee33c5d3c2e926c1d3080ad0be0743d00ded2fe09f726c68a025d070000000d9beed89a65c4500000008000000000630c029fb0bd67ddcdfbde2ef9671b11a95fdcb1213deaeef71f12573d98d66b6c0efdd2376ccf8685edc6f55e77284afb11b1dea4effb6e22cf50bf1cec186f6faa0e51cd20056022ee1535775f4fc1c047e739e2024b563a9478fcd8c7f130a1eff91cff4a30bea5ed859f22f173f460ad820d0b52611ac1cf37c4b8ad7a8843017f57203fe5ec2211d2d42cdd45bae9b608d0d622c3fe88b35899683fdf64e10bcf55f456b5f3781b541848010bb4b9"], &(0x7f00000001c0), 0x1000) ioctl$int_in(r1, 0x800000c0045009, &(0x7f0000000100)=0x10) setsockopt$sock_int(r1, 0x1, 0xd, &(0x7f0000000180), 0xfffffffffffffdc3) ioctl$int_in(r1, 0x800000c0045002, &(0x7f0000000080)) 00:28:40 executing program 3: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) getrusage(0x0, &(0x7f0000000200)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = userfaultfd(0x0) close(r2) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000300)={0x9, &(0x7f00000002c0)=[{0x6, 0x4d5}, {0x9, 0x7ae}, {0x8}, {0x42, 0x101}, {0x1, 0x69bd}, {0x6, 0x1}, {0x100000000, 0x6}, {0x8, 0x57}, {0x9, 0x8}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x51b142, 0x0) write$cgroup_int(r3, &(0x7f00000000c0)=0x7, 0x12) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0xfffffffffffffffa}) [ 365.859289] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 365.859289] program syz-executor.0 not setting count and/or reply_len properly 00:28:40 executing program 4: r0 = gettid() r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0xfffffffffffffffe) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000680)=0x1000000008004) read(r1, &(0x7f0000000000)=""/143, 0xfffffe5e) r3 = userfaultfd(0x0) r4 = dup3(r2, r3, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x4) write$P9_RSTAT(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8c0000007d0100000085000100ffff000001000000000000000000007ae7ce0000000021100300000009000000070000000000000005002965746831170076626f786e65743170726f0800726f63766d6e6574314713002f6465762f736e642f636f6e74726f6c4323002300286367726f6d70242fc0be2d24766d6e657430626465766574683073656c6670726f6309d59475c8bb10153611fd677ff70c83dd71dbe0429726c1e51332c541d3d52ec0613687d593d5d9e522891b98f934591b93e636bf4db89d9271"], 0x8c) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 00:28:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) r1 = dup2(r0, r0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000080)={0x7b, 0x0, [0x24, 0x1, 0x8, 0xe1]}) prctl$PR_GET_NO_NEW_PRIVS(0x27) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) [ 366.206699] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 366.206699] program syz-executor.0 not setting count and/or reply_len properly 00:28:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x20000, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000080)={'veth0_to_bridge\x00', {0x2, 0x4e22, @loopback}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_RELDISP(r1, 0x5605) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620c, &(0x7f00000000c0)) 00:28:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:41 executing program 3: r0 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0xc, &(0x7f0000000080), 0x10) [ 366.692649] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 366.692649] program syz-executor.0 not setting count and/or reply_len properly 00:28:41 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0xffffffffffffff00, 0x4000) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f0000000200)=0x100000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='aead\x00', r2}, 0x10) ioctl$KDSETLED(r2, 0x4b32, 0x10000) 00:28:41 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x1) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000480)=@v3, 0x18, 0x0) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=@known='security.capability\x00\xc9\xbd0\x12\x98>\x02\x15Y`\x19j*\x84X_\x19\xc1\xc8&\x17)\x82\xa8\xde\x1c\xccL\xdci\x87\xff\xc9q\\\xef\"\xce\xe4\xc6s\xd48\x8d^V\x04\xa0\xb88\xaf\xb3[\xd3R\xe4\xc9\xeed\x9aw\x12\b0\x9c\xa46\xbf\x91\x9f\xd9ck\xfa%_\xf4\xb3\x1f@\xf8\x8e\xcc\x9c-\x81!q\xc4\x12bO\f\x14/\xc5Oe\xf4\x929\xf2v\x86\xc1}H\x9e\x92]\xa1\x9b\xf3\x1e0\xecu\xcd\x92#yWf\x1c\xe8\xa1V\x84\x18\xe6\xd3\xd4(\x17O\x89\xa1\x1c\xc8!\xfb\xf6A\"\xa3okA\x1c', 0x0, 0x0) 00:28:41 executing program 4: bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000100)="aa", 0x0}, 0x18) 00:28:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:42 executing program 3: unshare(0x8000400) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x4, r1, 0x10, 0x0, @in6={0xa, 0x4e23, 0x2, @mcast1, 0x9}}}, 0xa0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x802, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 00:28:42 executing program 4: r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000005c0)=@req3={0x80000000, 0x0, 0x2, 0x3ff}, 0xfffffd4e) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, &(0x7f00006e9c68)}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001900010000000000000000000001e0000100000000000000000000000000000000000000000a000000000000000000008100000000000000000000b585bb60e745d850b452e2ea6e4a961eab776fcdc4457f54335e5294b9e082824cdf26c227817276cbbd00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000698c951200000000000000"], 0xffffffffffffffb1}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x1}, 0x20) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x80, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000080)={{0x5, 0x6, 0x232c, 0x4, 'syz0\x00', 0x5e56}, 0x1, [0xfffffffffffffffd, 0xffffffffffffda6c, 0x1000, 0x7, 0x7, 0x6, 0x1000, 0xffffffff, 0x9, 0x5, 0xfffffffffffffffa, 0x9, 0x7, 0x1000, 0x400, 0xfff, 0xffffffffffffffc6, 0xfffffffffffffffd, 0x0, 0x2, 0x2, 0x24bd, 0x80, 0x7fff, 0xe0, 0x6, 0xbcd, 0x7fffffff, 0xfffffffffffffc00, 0xa217, 0x6, 0x1, 0x9, 0x1, 0x3e56, 0x1, 0x5c8a, 0x5, 0x10000, 0x2, 0x9, 0x3, 0x5, 0x401, 0x0, 0x8, 0x5, 0xa7, 0xde2, 0x1f, 0x10000, 0x350, 0x2, 0x8, 0x4, 0xae1, 0xfffffffffffffff9, 0xfffffffffffffffa, 0x8000, 0x2, 0x6, 0x0, 0x80, 0xfffffffffffffffc, 0x2, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0x3f, 0x400, 0x0, 0x1, 0x85c, 0x1f, 0x7, 0x8, 0x3f, 0x414c, 0xffffffffffffffff, 0x80000000, 0x9, 0x3, 0x3ff, 0x9, 0x1, 0x5, 0x10001, 0x6, 0x7e2aeda9, 0x23, 0x7, 0x4, 0x7, 0x1ff, 0x0, 0x3f, 0x5, 0x2, 0x1, 0x9b3e, 0x326aa698, 0x1, 0x4, 0xfffffffffffff782, 0x5, 0x2, 0x365f, 0x379, 0x8, 0x2d, 0x4a4e, 0x80000001, 0x80000001, 0x4, 0xff, 0x7fff, 0x6, 0xffff, 0x4, 0x6, 0x2, 0x1, 0x8, 0x1, 0x4, 0xfffffffffffff74f], {0x0, 0x1c9c380}}) [ 367.239446] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 367.239446] program syz-executor.0 not setting count and/or reply_len properly 00:28:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) fchdir(r0) 00:28:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x1, 0x0, "d57ce9009481973020cb563321b2f92ea3cfd11945aa617c2b7501800000000000009175e49b4811161ae1af16dcdf825e95b91202ad80e1788234e9e345fb18fa68f06fc2a2854bd33a10b4dd26fcc0"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x4, 0x0, "1396c4e201eae44025001113c0d31c196dd57488919769d1ba672557d654bb82adbfc0a7a8f1910fe466cf4859b4b400749cb46fbe87e1baa5d2a151c2fbbb0b0a3260a1ab77875e42822c8c14a54822"}, 0xd8) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) 00:28:42 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x80000001, 0x4b}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, 0x129) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r3 = socket$kcm(0xa, 0x2, 0x73) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB="7bde92b200000000"], 0x1) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0}, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x4000, 0x0) 00:28:42 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu\x00U\'\x9d\xfc\xae\n\xe1\xe7\x9dn6)\xabf0\xbbh\x15>\xbc\xa7\xc3\xe8\xb1\x10\xa1/\xe1\xa8\'\x0f\'\\l\xfdq&\x15\x81\xdb\x82\xd8Q\xd8\x91\xa4\xb5C\x05G\x1f\xd6\x9b\xb2HT\xea\xa4\xbb\xd7%\xa45\xdfx=\x18\nU\x13\xa7A\xe4zm\x19\xdf\xcd\x0f;\x97\x88\xd9\xfbt\xb2AQ\xd5G\x10D\x04\xde\xacDYW\x05[\x1be1\xdf\xb8\xf4\x85\xab1z\xd6\xf0\xb2V\f\xc1e\x04\xc5', 0x200002, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x2100, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000100)) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f00000003c0)='cpuset.memory_pressure\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000000040)=0x1, 0x1b) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x41}, 0x10) 00:28:42 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x200000000000, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$sg(&(0x7f00000004c0)='/dev/sg#\x00', 0x1, 0x2) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001540)='/dev/vfio/vfio\x00', 0x480040, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x109000) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x20000, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYBLOB="000000800000628c79b87d0d88ae6881fe0c219bef86d4747dde850a12e5a27119c3661cb161c94054dac2041e5c624e2ef609568ca4d99251b3d648d235f8694a8811795c5c8e1497c36117523821b38ae007120f39b436f7c140883ec18c4b8eb6fea8b4f35dfefbce5e0b478abde99693df0a274dc7769c9b3ba1cdafd8d54a064d7bf17cb7ead8986bd54b23cbfe757bc493795d742df6de47259574094bb317bc7b20150500000000000000d35a1331d28e873c06c613d2dbe8df8a046957efe70aa844130f66881b3d5d8b5851f41a1686414cda1b3a463fa1ffcca7070e1d76263dccedd46d9dded3f8faf8ed1d0e612f5e5d12e956e92fcd62f76ad5ce96ef471ff6679245ccede87fd701ca6b09b14602122f569a3c3a864d757d3b1e582261aac0a80f2e517547734bc5382630f0c796270ecab66bfbb09e921c3159bb2a8df9e0f03ddb45354aa2620f175bdc5053576ced35e12b6828a32a356ed24de9c88cb01330d39c4f8784601a7fdfef7e18f31c010bf1b3dcae05c3b5358352a6c32f976bd41afd93dcfca598e2b8dda17bdb5efcc6a850ededab564f66bdede292ad91347f5aa5fd27dfef7c06324a8d055afc6a45b4c2ce5d09b398c1c067b3fb9a3bb2c30def211de6fce4c1fb18f4ed9622a93683a0147f6016526c10491e98f30f63ea64b81e1b18c1a99aa5fcff22275f77dfd84b98738feafa9ec052f5d2e2114a5795deaba56e3222ce30e347598ef4bc9d59c6b61fd9525a4162caf2e2b003379311c7ebfbf663da295ca86d70ed0b882e8dc5a3a5116ba9cd3ee370c6d6090f6a9deeae12815805858a21a20136bfd93b949ad83be65149090e4dcc4e68baf866ed5e39f0d70cac337bf3e9d84e6024910e58a6616d26d13343460b2f79bc5c55e5b4b7fb0b6811e42c8da833680829bc88f1456512f50ee36aca56fed86972948a0a683f25cd09d947c400f2cb61c82b419b2e3be86c3b0bbd30f241f8b7fa651312cd16e8c79c2e549f71da4962b24e5f4991eeccbfd12fc74894e66a4e0c81ceee7660a32b14c7e7d4dc97f5683d5ac9acddb38f220d5db262782037a96e8f73efd692a263440dcf93e07d0ee9d75e2a70c68a30739c7abd17edef9ea2032225750413ab32a44e5b7951332e8a1e72da5069ebc79d6be946d2cfaa3cdae0f6cb6c999c9f0958c6dca012ce24e8f36653cdbc100aeb2ed31b7969c1f89d511e0882825712e81cb513bf94cf60971093a228e587665548cb8b9d559398f77053e383a01aad325ef764340ea157888612c0e064568d28996a9f561ba21359460502be3be7c8220c69bfbb1dae6ac59e54c0f2330b695b3bdb27308d8ca3df919bc89123b29c03eb1afa3b49e55ef9c2ec19f0c1d3d99efd2080fb63a171b536cc4cf2258d9465a18a0c69c46f446715b4d2bcdc21b6f292d2b5ca67892929e897ffc7d3bda20b2840a73f68d21ca1ef2352414de0463a250475828e7ab9c1ade44e4b8dad8614349792b204841147d987c33af46429fd9eb497791144439175822af86b82ad713810e546f5f60ab3bab94163df29869aa81918d173f5df6f408844fe722b432dba5eb763d3f8b5b43aabe5bfa25baa6d2a7e7f05a144d2982b215a8e24dbea417ea473f80d429f2025fd188729b18657009ddbd5fae4ab67f224016ff3e6af92ad248c42585161ed94db9fdaf92239112c1bb78c098569632c8cb2f9e30a17168fb6cf1008dcedc8719ff36ff390d96d372f61056bc3a1ba4fa7a1d0eccd3beb8329ad292fcba99b72bfbd91583882a2480c5463679cd9b7fb9fbf3afb02eec0cbd996b5bc33ebf15529332d02bb29dd16e67099816089160703351f5736a8e3687aa4e65cd8dd6c100c2edf3a5a6c5843fce027996fd21ec9a8763a9b97903ec58589741106ac80ec3e2e08abfba4bbceea735d662ca079422da817f6828ccba877acf84f81deb7cd6bf80b88a29fdfa77776a552719ab9d76021e9d24d8d4ebc86f7d139d0cff00a0572c479eb79552ac57742a34a1d7f17f16ab223c9bbde1ddc3deea31fcd9ecd45f1be80fdd1dd66c99ef50350eeb30c9d5e22320c0a55c73fda4b5c6a1d79f6cfb5988149605fe11b5424a3a0d35d1b54239489a1c337659c636fa7c24b28cd108806277af5d5562380c8cb4224f0a1747df979205a8f0c08c87212d162780bbb92f246655d2a9bf20a244260137c8c1dbb57df9fbe15f81122b97edf5a4c0320f4f7f331d4a503e9760787ce8d14385cff536dcfbf0ee25066a596ded6e8d39b64525b518a22117b50f0fe3a309418eb0501c54e06cdfb762adb3082ce8f9c946ef5f83dbcb1cf1df93b7309438c9c1bb786b80fb7d4773a2a7b2964b873409b9a154dfc4b2c02530009157d61447335fdde46265db1660f0c6c39aefdd83958544adbaa6363f835aeb0e3838e0e26124464eac32b8b3c1d2c71edb905295ff15c007ddc7a34d347457c902e02489b515dd9736b8bdf035514626742c1f95b34db4c450ff8c4d541715d5353293d4ccf7f7becd60da3f9e365d81a2d2fb9cc404e771bb23286aac395d2f77b358e04beb575fd5e7cede06a0312003028841c808caee7b80df64459178d7c209aaaf4a4f1e0c52f1d58cfb112a5d3316a00d3f6ee578bef71081b37b3ce426f96d18792d560544a1256fca7300d23e92b85be4b1908bdef2c1db36b0fac3cb999d592d2b4c62ba020252c7304561350755398cafbf2e02568fad15761c4eafc82811bb6d536addd3b11b18bc8110fc2fd4e83a13ea9d9eae22c9cda6d7398d9274005e1704bcc68750cdaa42efe32c23a5b791f1ecd0689a2d203b2c27ee28872dc8a80db2f4e0b2a36bbcb187f4d5f1f0d4e0d15d7c5ecc1b5a57b97b7ac85c2d8eac5e6ff1501ee15a1132f147c21f1f7833d8dff79bdb4736c97d8692908e03c572a6380842508f9c6850ff13d15f42b5eb95636bf5ebe5d08348fa6b3d38d43d93f141650abf07292a7c8be50c84968ba7caa185abb04737b4f7adee7f8220b7451ef6777e67f7e11e4a9c69fa4e7a18d19841cc6b274ad4806cc736d3766b8a37aa2f9a77c04252fd5258e8c97069df687caa8f70046240fa27b8b25a164aeaf981d68c1a0334a4b37fcf7a3c0e4551d8008318837004c8c027cc64b4057163988a303f7e0b7dda2c7b69df66668c4d574d76888891a4429d4dfa108754ed67731a5d7ddbe5d190c2e2eece39bfbb2772496282b9a372d89bbd42dfcafa493434ceb5bfe229e28c5b2e7d166aa5dfb313f0fc2a97964e64b4fc312970b301809c8a178c2a449f0919809c6222e32402db32ae05cfe5adb400c02a020405e907dbb93caa24a3dc2b21c96f6e875cce977b58c5a26486fc6b403051c117906953739f896ef675efe56e128940c17b2ee4cc3c80a1aaa6c2942a6b6a041d533ec60438f827a429f55184b19cca395bb823930288ab2b472497e4663a2af2641fa42e8678fd7145815d622474ebc90a138a49defa95832a84f81ff053f6739926ce8f3e05d7b9a8dfdf4bc0fa0af77c51661539161f223fe6b48b273f357903cfb968a3b0309a9af46b82d2bf3f27dc9e7a0722386fc45b92f716ef218e9661d17694d5b440667abe9b952cce4f0fafd273481f5c546e04e3b0232257faa8dea63dda18adb2b1f853f8b7a4ef6d5d167aa382895a80165764ca35417eb4e950bbcc008e279ec873415a7598b4fff404dac9d929358b764ffe33d4ad4437bab4eb7ae5eb4a15b155e10d9e317823e037189d3c5397154a3dbcb962f4a519dec530918af434d3022a332af5198f4b6360091a6b77a4ee038a0a88aa7f2cda031d994c24e477835a32704f14705b36bf88ffc76ec01c24adc88d46550002f47de9b15899405678fd7b1b9332ac5a5e34fdb1f856c0fa610f047d604c0307cd716306990044c39def7482d416e41ff8a5d2d33826132320450cebee933b95094572c787fbedae426308f04676e6696d8cdbc3a97717ee37c07b337eb35181824471037b0d885eda5febdf102b9cf1ce61352c0d7b40a13654563ae136b1c576c23a8dedbdeff72665f7f837bd141fb864a4883e156310e1323b4bed17c8688fea4d391f889ee927b558cc495241b3aedd9a67ff6be205e1bc0fca9609df5af8d6e1c7b52753efc169d946c649ff66d80cf2d81bd4290a04b8bfee43fb1f1b83414c67e4d39811d991dfa52c4219edb426d1a50494ea96dc1a569db08f664172d718ec7366f83f029a9dadfb58de40c47f9cce8d9529f2012fc01f360eacb067a173b3b6314ef8ae9b04560221d8cd31193986999b88ffeee5041c773a411f026cc576f1beaf00a475c65a4e1308275e0368fd1166f683217ce7f11036cadcdcf6b3aa42d77cffa7d0a04a8f4fad6c890ea5d728a413a7811a46906a376ac27ac230ee94a13b821bd148c1cdc3f5e0ed5350b4851fe64fcb7208ff0f16eea2a61a361b1d03c9b3875be0d6e109e617782fbcb0812ee4f3572c9908ff7baa4c6c7d83c8321809a4c7da0ff8723af94ca81f41954a3e71d3f618dea38c17c8a45028b8bed8a9fbc7c287fa1a63dca01f1f881c06411e09238819801379d98641a869124c9affef005821fb542bf1f78a21a9ffb618c6fe0d8940474710f00df81f99b03e5981c9fd043b52fb044f8de813d7ba8e1f3de63cfc28958d00815eb2d04ea275ab8e031c5a11655320f78587ce9b5c9ce5c1cac3ae6d031caf4e25fca547c4c19651bd7f80ac888b23cc812911cab8bbf113c1ee0ebc5e109692476aedec053ed77d67b186f5ad1aa75e5753784da57914a7d45bc648cd37550958ff36601ae8b072ce38a2c4724f65f5704c3f81eddf9234f1f173f29f5f8a429b686be92337be097dcf43330bb9348c7d78ad91a9914382c94ff92e14f13f2400600ee29d3f432a35a849fe010650a0278118f4a0e6d44bbaecfa0dd3d7222c452ff95cc12b9edff720d8e0e5d965cb9d252f32c111a87d05c0bc57fc816e0b4cf0611371a4dd6cb6bf7752871d911056d6050261cc02728bdea5b419a6e6136b1129603faf51b74fbfcedbddc1df1a7f02d9a1f3b71a9614df26a0af25d28739086ed777cff3ee00dd6e3c1afe758d9efa7c32165256b053ce9f40bbbe89d07cf8da858e7eed400c6079030250327f6f78841772aeca606d46969b122454f87d69c04dc4a727c3a878d19ca30b4a6d20b7029f5d2c4fa6f5ffa59ac5828630d25d42e32c20b70f2499c2144d2eaf27af147701c05bdbd1b0fee999d375f09f5ee83aee803e427f04152141efd2c52504fdb36f97225f3969f12a42ed102d3f42cdab4f1fcdfa9dff3248dad4b4e10843bd5fb60d425a83c35e5d71f9d5551007f9a2a2fb0329b211cd9abc506ecc5747f50fb2b8bbd34f40bcd84606133559b4a70ebdc14a660e4a5e66afce8d7396328aa9457670bd6adad7c95eef579b655c176bebee8ea6f9966d0121f4db17da116aa25e8d9096e1eb8a1db5832bee7385ae842c607fd420bd57f9f24bb00e17b890c09503adacc38cf8990e9012d181223fc7369d2e3cdd8cb7680bee331bea703bf52cdaba68f28756e5e4a952596069c60ed750e38e0d26769c3e25f95f0759e427fb9f2d3478fd33462024d3b0e6929d008c40a7c9439337f486a48ac447f2c735e057a4d616daca5dee7944dc1e244b5dce4847951d721cc59c925315ad8b825f892ea1f2ec9f6334d83a5ef77c70afa682edcb5bd8531691692b2e61c288b59b5c343e85f2f20aebafbd9f82dcb756e7acf20be"]) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f00000000c0)={"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"}) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x201, 0x22, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000001580)={0x7, 0x4000000000000000, 0x9}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000015c0)={'lapb0\x00', @random="476d06f2d409"}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) [ 367.858776] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 367.858776] program syz-executor.0 not setting count and/or reply_len properly 00:28:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x200000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2, 0x0) sendto$inet(r1, &(0x7f0000000240)="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", 0x1000, 0x1, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) 00:28:43 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r1) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x100000001, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000300)={0x0, 0xe3a, 0x3, [], &(0x7f00000002c0)=0x2}) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000340)={0x2, 0x1, 0x1, 0x100000001, 0x96, 0x5}) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x68, r3, 0x304, 0x70bd2b, 0x25dfdbfe, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x9, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x40881) getsockopt$inet_int(r0, 0x10d, 0x100001000000ea, &(0x7f0000000200), &(0x7f0000000100)=0x4) getsockopt$inet6_buf(r2, 0x29, 0xfe, &(0x7f0000000380)=""/21, &(0x7f00000003c0)=0x15) 00:28:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x80000001, 0x4b}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, 0x129) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r3 = socket$kcm(0xa, 0x2, 0x73) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB="7bde92b200000000"], 0x1) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0}, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x4000, 0x0) 00:28:43 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:43 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x3f, 0x100) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f00000000c0)={0xc6, 0x24, [0x3f, 0x5, 0xa00000000000000, 0x4, 0x1, 0x400, 0x7fffffff, 0x3a8, 0xd2]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000100)={0x7, 0x400, 0x5, 0x4}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)) creat(&(0x7f0000000000)='./file0\x00', 0x5) semget(0x2, 0x3, 0x404) 00:28:43 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x800000000042101) write$sndseq(r0, 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x800, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000080)={0x0, {0x3, 0x4}}) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x80, 0x7f}) 00:28:43 executing program 2: r0 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x81) accept$packet(r0, 0x0, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) write$FUSE_DIRENT(r1, &(0x7f00000002c0)={0x38, 0x0, 0x0, [{0x6, 0xffff, 0xc, 0x0, '/dev/video#\x00'}]}, 0x38) socket$bt_rfcomm(0x1f, 0x3, 0x3) 00:28:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0xffffffffffffffff) syncfs(r2) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, &(0x7f0000000040), 0x0, r2, 0x2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x1, r2, 0x3}) [ 368.452388] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 368.452388] program syz-executor.0 not setting count and/or reply_len properly 00:28:43 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0xffffff89, 0x0, @remote={0xac, 0x70}, @dev}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x42200) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xec9) getsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:28:43 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:43 executing program 3: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000080)=0xfffffffffffffff9) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x7}) mremap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x402000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000100)=0xfffffffffffffff7, 0x8) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f00000000c0)) getresgid(&(0x7f0000003600)=0x0, &(0x7f0000000fc0), &(0x7f0000001000)) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000004000/0x3000)=nil) 00:28:43 executing program 2: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r1 = semget(0x3, 0x4, 0x110) semctl$GETNCNT(r1, 0x4, 0xe, &(0x7f0000000180)=""/202) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x400, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x2, 0x8000) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000140)={r3, 0x100000001}) fcntl$notify(r0, 0x402, 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r5, 0x0, 0x0) 00:28:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) r1 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x800) accept(r1, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:44 executing program 4: setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e20, 0x8001, @empty, 0x80000000}, @in6={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}, @in={0x2, 0x0, @dev}], 0x58) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), &(0x7f0000000040)=0x4) [ 368.927428] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 368.927428] program syz-executor.0 not setting count and/or reply_len properly 00:28:44 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:44 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:44 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x3f}, &(0x7f0000000140)=0x31a) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e21, 0x4, @empty, 0x8}}, [0x3ff, 0x7fff, 0x7, 0x6, 0x400, 0xcd, 0x5f8, 0xcd3, 0x1, 0x8001, 0x7, 0x80, 0x81bc, 0x2, 0x2]}, &(0x7f00000000c0)=0x100) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000100), &(0x7f0000000380)=0x4) 00:28:44 executing program 2: rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80, 0x0) r0 = memfd_create(&(0x7f0000000040)='\xf7lan0\x18\xf5\x9d{ke\t\x00\x00\x00\x8c\xeang\x00', 0x4) ftruncate(r0, 0x100000000040001) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x10) [ 369.353890] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 369.353890] program syz-executor.0 not setting count and/or reply_len properly [ 369.423259] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 369.423259] program syz-executor.4 not setting count and/or reply_len properly 00:28:44 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_cmd={0x3b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200e70ae4a0f5acb, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f00000000c0)) 00:28:44 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe"], 0x15) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:44 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000007442f6821e4cb20c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x78) ppoll(&(0x7f0000000080)=[{r0, 0x4}], 0xd2, 0x0, 0x0, 0x0) 00:28:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400800, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000240)=0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/ppp\x00', 0x400002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r2, 0x0, 0x1, &(0x7f0000000340)='\x00', 0xffffffffffffffff}, 0x30) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r1, &(0x7f0000000d00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000480)={0x82c, 0x20, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@typed={0x30, 0x15, @binary="ea8eb0896ffe8e48985321efef069192719a35121ba18af456d91e0a56e443211330dc0c98fea6aa7503b1"}, @nested={0xe8, 0x89, [@typed={0x8, 0x15, @str='/\x00'}, @typed={0x8, 0x72, @uid=r3}, @generic="c4e6f3f3161736f56870021949f314f5dba7eff4b1242559ce3970bb4951c00d319956b70c6ff77a16633d62ad89bae0a0783a4f4a9f0e0f19debffb418047cdb90d1f1efed93041f02cb45ed065e24379870315b03c82574db7b4a46ac9e6cda078493ffb0a9ab601d5fc9918f0ad79e1c5689608c38fe2e329d27e4b4d19a9837eba1fd6a8e5b3d8d71c124e574b9bbbd25a682f2ff28033492eb18421e4f4cbbfcf21fb85e32b8bbaf87be7e30b1ddbe020009e57709ed1b252cf2e9a310b4d4b15b1a2b408b4c4f4f738b175d6ebbf"]}, @generic="07e6e619d6408b4802141f6dd7a699839e147780d40abf23017387cf46036cd2474aba1e5724fbedf93dc011e1c1af7a7243465bb618e5ace989e6e2dd053025524999f3608a47333e4a94bd924ff97df264d000d6f921e9338411d41b3af5751fca53ba487d80", @nested={0x190, 0x6, [@generic="d6e2c4997d72e716007f2418ec2c51a9bf617a2cc29a348936edf1e983e39201596344521c046c56ec78f07b652dfbe305a89728bb78c2ac017c4bc19a1edccd4ffe88294c0801075c20421cf44f8d990eafdf6f40a2fa", @generic="ba0d95b31ec484892ed1b14abcafd57f02a4199709a33d39f503b5bc974f46c65f287500013bfc288a3c837b97a26c0e6c628788e2e581bd4a97c255b363255c4cb84d207ad7b1c96ceedbb669391496cea0f8e98a4f376d18", @generic="4660123f", @typed={0x8, 0x5a, @uid=r4}, @generic="a75561fd400c3c8607943dc7202743552e5532f1", @generic="37f0f95bb675c128824865a0054e5ef6ce71985d5d71ffd3f2afad65219690b1a0cc9d806c35d42cc275e98d6b4678ed77c5e8c566170b0244879f28d17d450c8e487f1194e1dd3507b75a289cb50d66562c631d114633729cf35d1c0cd58b69027c8ca1f58610e4bdeadc69dc47258d8949d4152d623bf329bddbffdc94cd1108dd7a18e1be2246efa01cd140e2751c13a27d76f74be414a2a35a3f0ef29ccead44c8288cc7be7dc3911ee0515dbbcec9b04cef8d27815d31c89859"]}, @generic="10adffffe12fa7207c4f6d58e5129aa060d74e2ddf569dc1f46f6e7ac32710bc26e8517eed1fb3bfceadd096a5dc6fb49c2f72257bfb2d23f7d51d5c1a55f479beb15df35499b1882e2a3b472c737c4e37d1565ed10250f9603df9c83aaac571606a5541df61c943461eadce048a1c8389ef61de7f421cb0466f08d0a0a551f362775da8c5ca963d5d4cde7affb218b08456220612618e5fd09ad8b83121be9e41ea67017f5707bc523c", @generic="9a8ca1c84889ef25d4f9a63b3b94cca1025aba0da48ac9f92e1a8e8c9ce81f562b9e2f029b3eca6c0165a2b447490361235de7e172001a6df15d79dff8a84cf167ca6b5e7aaec014e926e59a4b1390a70a9e66bdd625d18e0c81770ff6407878c9d50aa4474b58baeec55a3e41d3f686b6c4e55c0fadce30846f35ca98ada770c6ddcc53762f18dd1595b4c10aaaf821e25feb4b3f9b8092dd82b606dc56dba7b117492c21d7", @nested={0x144, 0x61, [@generic="b870e5ed2c71fb3984af7567e17ae9cab8c17c95d49e9120a33ef2d7ebeaf7b1c4a41c10f6f1963cc5eec56acde0b28e79690b", @generic="f1da928ca1116c06e7d5e775507ebd8822b6e118ff79be7f80b46cb383c55ef156daae02ea55ce3c2a3e4194e60a5b5ba82569b0252138e87a4732d38d4f2f113a1dd3133b10f0d371aabd4b1a505f4ddf9baa6ca271a01631c43d0dd61d2cb325d015d255c458c6f3336ddb0750b59afa0aa384277c6cef2f2cf006ab3bfff04774a0ccd240540c97e61281c2633978110b49df5ea537692be0f9fe8c23c67c6884d86df2ecb66363ac7a973f58a4a5d4137853288b4a7e9e2eb4fc8c8b0dba5fe0e7cf75b0700f5b28f72b20b8e9e72d6321705ec0174fbbaf0b079ec543ca33efa9f22a38", @typed={0x4, 0x6e}, @typed={0xc, 0x2b, @u64=0x7}, @typed={0x14, 0x5, @ipv6=@local}]}, @nested={0x274, 0x52, [@typed={0x14, 0x38, @ipv6=@ipv4={[], [], @multicast1}}, @typed={0x8, 0x1f, @pid=r5}, @generic="957281c5c789dcdcbe8f7b521ac64e9869b18d3ac30983f600e0512cb1edadaf358324d3935eb572aea50f5674346f770d0580fc5ee567bb7cf7ca2c24af4136463751c97ec6a93dd17acfa46a197fd31188ec286bf33b9981504c2e659e1ac65392e3bfc895500c52f919fa1524f5487c80b9e35480cec22628585342cb8a6f5e8be3cf95e9e55c04d9cd1a978f316ed72847ee79451900704283daa7af426ca5f466e576db3518bfb8d5ce4ab3fffe87569a9aff6dbe8a86e2221d804b3c1f69786cf67b1346ead37cb75d748ed91c6a68bef391d80c869116909e6b1bf27225e0d388e9d31c0d8f8c2aff937c47", @typed={0xc, 0x75, @u64=0x9}, @typed={0x8, 0x9, @uid=r6}, @generic="dc4fa679175546ca2aea390ca0e0240bc2fa40aade6b6b505e0fb4d4a48ec834fce35213132225316a6e47cb0e1e79f85a4e388923a95062012688cdd4aae76c5889b1f90edb105ecaffb5a43753e74d99ddfbdd9df9e49ca1ab", @generic="c432f50483d6f9598e1a281646ad3af40a1bd24512aa47b43c9d2e790eee3dd52df3860850bfc515d562af15cd0bdf04d13ba9689cfa102c2b82", @generic="52b8bb8c4b03999e4ea2bc2e174cdb9b4ab337d86b794250fd62193821c53ac7c2545eb5739203b7741a42fae75f07c418d46ec1ebe0192e02ed0003b1b2cf7a86997e13e284a1ebd7a48327152d516ec9c66cf0f75ca2d2b3eb1d01b4e2050d515e16164bb184e717786b7dbc24e1bf8d6d71c7b329399c1200ea572ca32a5e0ba82ca5aff8d947e395c984a83e72df1d36589869a96e206744f431e51a9490967b68077a4ae7393af93e514cc3c84d9e93bd691d69321f128dd5cd6b"]}]}, 0x82c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) [ 369.795893] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 369.795893] program syz-executor.0 not setting count and/or reply_len properly 00:28:44 executing program 3: unshare(0x20040600) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) io_setup(0x6, &(0x7f0000000180)=0x0) io_setup(0x3, 0xfffffffffffffffe) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000000780)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 00:28:45 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x80000400, 0x80100000044) fcntl$setlease(r0, 0x400, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000000)=""/65, &(0x7f0000000080)=0x41) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x402}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="d4400000e6e62e4f5739ceb2b7b18ef2d24ab66eb89d26b600fbdc333a6c4ff6bdf245aed886ef721effde5b9211e87f234700a0333168", @ANYRES16=r1, @ANYBLOB="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"], 0x1d4}}, 0x20004080) rt_sigprocmask(0x4, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8) open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x1) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) 00:28:45 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe"], 0x15) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:45 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x200) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000001c0)={0x3, @capture={0x1000, 0x1, {0xfffffffffffffc01, 0x800}, 0x1, 0x5}}) r2 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x9, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000140)={0x5, 0x3d4, 0x4, 0x60000000000000}) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f00000000c0)='mqueue\x00', 0x200000, 0x0) r3 = creat(&(0x7f0000000080)='./file0/bus\x00', 0x0) mq_notify(r3, &(0x7f0000000000)) close(r3) [ 370.175180] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 370.175180] program syz-executor.0 not setting count and/or reply_len properly 00:28:45 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) unshare(0x2000400) pselect6(0x40, &(0x7f0000000180)={0x8}, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000ff8)={0x0, 0x989680}, &(0x7f0000000ff8)={&(0x7f0000000ff8), 0x8}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x8000, 0x0) 00:28:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffffffffffebe) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000080)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x5, 0x4, 0x800, 0x80, 0x8, 0x7, 0x0, 0x401, 0x20a3, 0x4bf}) 00:28:45 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xce, 0x0, &(0x7f0000000280)) r1 = dup3(r0, r0, 0xeb23fd6872bd8c88) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1, @random="664b67571de3"}, 0x46, {0x2, 0x4e21, @rand_addr=0x1ff}, 'teql0\x00'}) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000000c0)={0xf, @win={{0x80, 0x0, 0xfffffffffffffffd, 0x8}, 0x7, 0x7d9, &(0x7f0000000000)={{0xfffffffffffff82b, 0x200, 0x2, 0x9}}, 0x1, &(0x7f0000000040)="7e50a488287cf24aaca503ff36715fae150619d77f2c0bd462ab5712f93c0ac51247c2b91de50114fbe88d3a8f614257a6199f242672b861c4052586a2d1a4e571628f22602ca4dc6f3e8cca6b1b255099690bafdc381a42d21103dc2a758f227c147f8b6b474f5004", 0x6}}) 00:28:45 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe"], 0x15) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:45 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000100)=0xc) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab000001007e65000004000000000000", 0x10) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000180)=0x2) [ 370.706508] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 370.706508] program syz-executor.0 not setting count and/or reply_len properly 00:28:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000240)) sendto(r1, 0x0, 0xfffffffffffffee8, 0x4008000, 0x0, 0x0) socketpair(0x17, 0x8000a, 0x80, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000080)={0x0, 0xffffffff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100)={r3, 0xffffffffffff7fff}, 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:45 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x35bd, 0x9, [0x4f, 0x7, 0x101, 0x0, 0x4, 0xcb, 0xa0, 0x1, 0x20]}, &(0x7f0000000180)=0x1a) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r2}, 0x8) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3, 0x0, 0x1000000101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x8, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x100000000000000) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000280), 0xcc) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x40000, 0x0) sendmsg(r3, &(0x7f0000001a00)={&(0x7f0000000080)=@in6={0xa, 0x4e21, 0x0, @mcast1}, 0x80, 0x0}, 0x0) 00:28:46 executing program 4: r0 = socket$pptp(0x18, 0x1, 0x2) close(r0) dup2(r0, r0) 00:28:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f31883070") sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x371, &(0x7f0000000040)=[{0x0, 0x365}], 0x1}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x42903, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000240)) r2 = socket(0x10, 0x2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x100, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f00000001c0)) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="290000001800190000003fffffffda0602007a00fde80001084000040d0005000005000000060000ff", 0x29}], 0x1) sendmmsg$alg(r2, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xfffffffffffffeed}], 0x492492492492733, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000000c0)=0xffff) 00:28:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957"], 0x20) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x32a, 0x0, 0x2}]}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x101000, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x3, r3, 0xfffffffffffffffd}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000021}]}) [ 371.293341] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 371.293341] program syz-executor.0 not setting count and/or reply_len properly 00:28:46 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000010, &(0x7f0000013ff4)={@local}, 0xc) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000240)={0x0, 'veth0_to_hsr\x00'}, 0x18) close(r1) dup3(r1, r2, 0x0) 00:28:46 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x7c, 0x0, 0x251) close(0xffffffffffffffff) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000200)="e3a3dd951bc5bea01152501df5ba84cc", 0x10) 00:28:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957"], 0x20) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) [ 371.692247] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 371.692247] program syz-executor.0 not setting count and/or reply_len properly 00:28:46 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x105000, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xbd}], 0x30}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000240)=[@timestamp, @timestamp, @sack_perm, @sack_perm, @mss={0x2, 0x100}], 0x5) sysinfo(&(0x7f0000000000)) getsockopt$packet_int(r2, 0x107, 0x1f, &(0x7f0000000100), &(0x7f0000000180)=0x4) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) readv(r1, &(0x7f0000000640)=[{&(0x7f0000000340)=""/134, 0x5e}, {&(0x7f0000000400)=""/3, 0x3}, {&(0x7f0000000440)=""/159, 0x9f}], 0x3) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) 00:28:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) close(r0) 00:28:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957"], 0x20) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:47 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x18, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="38870005000000000000000000000000000000a52bf4f15835357ca200410d4a1352524d1d995a62fd46696c3fead2916887f3a46f7f30bc08b03f292f72b20612938f3b0302b0d863ede4d1929caed5a2cc0193375bc9416ccc4da06678f2da5d85f090dce9394d6c7d173e3c83fe893227fa91ba44dc8ee2df742294aae4bb9a5d2dbd680dbb263a3de3fef4bb5245136a217e"], 0x7, 0x0, &(0x7f0000000080)="26a2f254a96aad"}) ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f0000000100)={{0x3, @addr=0x1}, 0x8, 0x0, 0xffffffffffff7fff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fdatasync(r2) 00:28:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:47 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000100)={0x40000000, 0x5, "bd7b819fd434f44e12c07ee6b23cc372bf023bed1922d678b49a5323e32a01d9", 0x9, 0x3, 0x2, 0x1, 0x3, 0x9, 0x4, 0x6db, [0x100000000, 0x1000, 0x0, 0x7]}) 00:28:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc000000"], 0x25) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:47 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) r1 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x3, 0x2) ioctl$RTC_UIE_OFF(r1, 0x7004) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x20000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x2, {0x7, 0xae8, "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", 0x5, 0x1ff, 0x8, 0x3, 0x0, 0x4, 0x8}, r3}}, 0x128) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000440)={0x5, &(0x7f00000003c0)=[{}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000480)={r4, 0x6}) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000280)) 00:28:47 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000140)=0x2a0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0x69, "3eba96a53129f70dff144154d359b583398f3bb66f4362c8aea5e3ef77c50c918e0b45b0001b552b4749de4136a31ba075b2fad474e9cb6728306cdd57617f189fba552794a18ab0d02a0981a7eb79a9e3e16c6d9cd3115de6a5fc7aa5bbbe5d67efda518fdf3078c3"}, &(0x7f0000000100)=0x71) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000280)={0x800, 0x7, 0x8000, 0xb7, 0x0, 0x6, 0x101, 0x4, r2}, 0x20) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={r2, 0xd, 0xb290, 0x10000}, 0xffffffbc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x80000000, 0x30, 0x0, 0x10000}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x8003, 0x2000000000007, 0xd4, 0x7315, 0x5, 0x800, r3}, 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e22, 0x3, @ipv4={[], [], @broadcast}, 0x1b6}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e24, 0x4, @empty, 0x2}, @in6={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}, 0x7}, @in6={0xa, 0x4e20, 0x1f, @local, 0x5}, @in6={0xa, 0x4e20, 0x4, @rand_addr="c6b80bb655c57b0ce2c9e5fce0df48a5", 0xffffffff}], 0xbc) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000240)={r2, 0x6b5, 0x800000000000007d, [0x6, 0x1000000000001, 0x8, 0x200, 0x3]}, 0xffffff58) 00:28:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc000000"], 0x25) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[], 0x2) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/9) sendto(r1, &(0x7f00000000c0)="f7e982867e571b7eee51cfc9a49f476fa3edf3df2fe4545027a2e7b8ba833bd390bb86474f59a1306e89e2f50459ab976a1f9ec2dab644f21292701c1a3d58499e0037992abb2974bc499f1fb87522382e3d37c82ff811fcd6276e58679f27b986624108ccc85533e8a47e1f0e4cb7a279d24a35f45ef49ff577951f397c543abb7dbfba8da21a16c5fe96cbd8838110bfc1f481921c0c9358860f525fd04a927d611862b480d720651264a15f9f2793accd2e2e41bf90b776e2a425006b6d07155c842c7628fcf8c4bbdde18f55f2b09ef6fff70d60c0e3", 0xd8, 0x4000000, 0x0, 0x0) 00:28:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xfffffffffffffe8e, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000000)={[0x1000, 0x0, 0x1f002, 0x5000], 0x7, 0x0, 0x9}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000001c0)="66b80500000066b9725cfe730f01d966b94a0b00000f3266b80500000066b9c47206b80f01c10f0866b9b10b000066b83ba9df7666ba000000000f3066b92a00000066b8f0ff000066ba000000000f30d81f3e656664e021660f38f666ac67660fdfce", 0x63}], 0xaaaaaaaaaaaabee, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:28:48 executing program 4: r0 = socket$kcm(0xa, 0x400000000803, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x4d, 0x0, 0x0) 00:28:48 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000040)={0x9, 0x100000001}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000080)=0x1) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f00000000c0)) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000140)={0x34, 0x0, &(0x7f0000000100)}) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r1, 0x101, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x2c}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x32}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x87}]}, 0x4c}, 0x1, 0x0, 0x0, 0x854}, 0x4000001) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000300)={0x3, 0x0, 0x200a, 0xfffffffffffffff7, 0xe8c, 0x4, 0x1}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000340)={0x5, 0x0, 0x4, 0x60070000, {}, {0x3, 0x0, 0x20, 0x9, 0x975, 0x401, "90adf606"}, 0x401, 0x2, @offset=0x2, 0x4}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000003c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000400)=0x800) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000440)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000540)=0xe8) fstat(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r3, r4) sync_file_range(r2, 0x2, 0x7, 0x6) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000600)={0x18, 0x1, 0x0, {0x4}}, 0x18) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000680)={r5}) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f00000006c0)={0xc, {0xec, 0x3, 0x0, 0x1}, {0x200, 0x2, 0x3, 0x4}, {0xda, 0x100}}) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000700)='/dev/rfkill\x00', 0x240, 0x0) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, &(0x7f0000000740)={0x3, 0x8, 0x1, 0x9, 0xffffffff}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000780)={0x101, 0x7, 0x4, 0x80200000, {}, {0x5, 0xc, 0x3, 0x4, 0x3ff, 0xfffffffffffffffa, "a0141661"}, 0x6, 0x7, @offset, 0x4}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) inotify_init() fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000880)='trusted.overlay.opaque\x00', &(0x7f00000008c0)='y\x00', 0x2, 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000900)={0x1, [0x0]}, &(0x7f0000000940)=0x8) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000980)=0x6) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000009c0), 0x4) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000a00)={0x80000000, 0xe, 0x13, "abed0ac2de7e19a55eaa7676f0c825b0816dc65df2764bda0b9e5d14bb1d40b1ef0e0bedd56138a36d0c1142ced6c9d2ec6b517876e35e17abcd802c", 0x27, "d1465fed3dc981b97be163b4edc72a06e55e8298364bf8844c4d02d388481cf79e77feb8185ed3ea79e6afc5b4652d4cd8e1405c843967b42cd65a96", 0xf0}) 00:28:48 executing program 3: r0 = socket$kcm(0xa, 0x400000000803, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x4e, &(0x7f0000000040), 0x348) 00:28:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc000000"], 0x25) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:48 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) close(r1) [ 373.109512] sg_write: 3 callbacks suppressed [ 373.109552] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 373.109552] program syz-executor.0 not setting count and/or reply_len properly 00:28:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) r2 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x401, 0x20000) sendto(r2, 0x0, 0x0, 0x20000000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000340)={@empty, r3}, 0x14) 00:28:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc000000000000"], 0x28) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:48 executing program 4: r0 = socket$kcm(0xa, 0x400000000803, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x5, 0x0, 0x0) 00:28:48 executing program 2: r0 = socket$kcm(0xa, 0x400000000803, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x3e, 0x0, 0x0) 00:28:48 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x11}, 0x98) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) [ 373.572637] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 373.572637] program syz-executor.0 not setting count and/or reply_len properly 00:28:48 executing program 4: r0 = socket$kcm(0xa, 0x400000000803, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x2b, 0x0, 0x0) 00:28:48 executing program 2: r0 = socket$kcm(0xa, 0x400000000803, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x33, &(0x7f0000000040), 0x348) 00:28:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000100000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[], 0x90851b95) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x40000, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000300)={0x18, 0x1, 0x0, {0x6b5116ee}}, 0x18) waitid(0x2, r1, &(0x7f0000000200), 0x2000000a, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8, 0x201) ioctl$RTC_EPOCH_READ(r3, 0x8008700d, &(0x7f0000000280)) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000100)={0x8, 0x3f}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 373.686362] sctp: Trying to GSO but underlying device doesn't support it. [ 374.285620] IPVS: ftp: loaded support on port[0] = 21 [ 374.420551] chnl_net:caif_netlink_parms(): no params data found [ 374.474549] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.481011] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.489192] device bridge_slave_0 entered promiscuous mode [ 374.497512] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.504157] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.512770] device bridge_slave_1 entered promiscuous mode [ 374.548443] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 374.560182] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 374.592174] team0: Port device team_slave_0 added [ 374.601117] team0: Port device team_slave_1 added [ 374.665703] device hsr_slave_0 entered promiscuous mode [ 374.702769] device hsr_slave_1 entered promiscuous mode [ 374.757328] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.763852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.770710] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.777308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.834221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.849440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 374.858842] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.868482] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.877074] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 374.893990] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.906748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 374.914789] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.921279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.935387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 374.944905] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.951411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.975737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 374.985025] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 375.003561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 375.017031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 375.031555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 375.044952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 375.073324] 8021q: adding VLAN 0 to HW filter on device batadv0 00:28:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace(0x4207, r3) waitid(0x0, r3, 0x0, 0xc, 0x0) 00:28:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc000000000000"], 0x28) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:50 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuset.effective_cpus\x00', 0x0, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x2b, &(0x7f0000000480)=""/117, &(0x7f0000000500)=0x75) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r3 = socket$inet(0x2, 0x2, 0x8) sched_getaffinity(0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r4 = accept4(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)={'team0\x00'}) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8900}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)={0xf8, 0x9, 0x3, 0x1, 0x70bd25, 0x25dfdbff, {0x5, 0x0, 0x8}, [@nested={0xe4, 0x1d, [@generic="d2181fa83d0b0ed4532a1ac7bdf5811809b8df22c9fd9ada0b167d780ce3a031328467c4996eb14acd33a9681af2839639de1755c23c1700e02657bc79de015bb96d3b047b8b2ded2b625867b13160ba149eebe852bc751d2f72aaace8ab73569b17cf46a6ed71cb3f8fdc15cb325ecb875418e5f68268ba51984d50ba7c5f8d340e4da4c7d2e366a04fb5c82c611d65809c1302746837296da5f4b6608e787c66a92d1f511f928f7f379d03467c3658b3dcdfef9490366e000b95d692249fd0928809196ed366fdc9e74c7c9ea28793f04635a184ef7838a45abef812bf91"]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,') sendfile(r2, r5, &(0x7f0000000080)=0xe0, 0x80000003) 00:28:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x121100) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010006000000f772c32aca4ebc73c12a040000000097318560a68333caa17bcbd6fbd2620865f015c9b991ced6e5594ee5d6ffc84b8b3b94270281810c972d2d04c9866791a945ba8531b0ca7abbaebda8c4343d1c23f37d4bf143de0ff0afc61ac557d50135fafafa9cdc3150b9be86c7fd0a5799f089bf89486dfa8e83304b3a96730c69861af3bad01229fac9401c5b6e451a29df68bc21e64805b169089b2dbabee10a057d9369c25edbb8dc47a6f7e5220dd70b4dc97cac25a6d57e11d899c36d6a4be932139095d95b573b"]) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$KDDISABIO(r0, 0x4b37) r2 = getpid() write$FUSE_LK(r1, &(0x7f0000000100)={0x28, 0x0, 0x5, {{0x8000000000000000, 0xfffffffffffffffa, 0x2, r2}}}, 0x28) set_tid_address(&(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:50 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) 00:28:50 executing program 3: r0 = socket$kcm(0xa, 0x400000000803, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x35, &(0x7f0000000040), 0x348) [ 375.295347] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 375.295347] program syz-executor.0 not setting count and/or reply_len properly 00:28:50 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 375.419967] ptrace attach of "/root/syz-executor.5"[12271] was attempted by "/root/syz-executor.5"[12299] 00:28:50 executing program 4: r0 = socket$kcm(0xa, 0x400000000803, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x11, &(0x7f0000000040), 0x348) [ 375.486293] ptrace attach of "/root/syz-executor.5"[12271] was attempted by "/root/syz-executor.5"[12304] 00:28:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc000000000000"], 0x28) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0xd983, 0x10100) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000240)={0x1, 0x0, [], {0x0, @bt={0x8, 0x6, 0x1, 0x3, 0xfffffffffffffff8, 0x7ff, 0xfffffffffffffff7, 0x8b, 0x0, 0x1, 0x9, 0x6b8, 0x9, 0x9, 0x16, 0x4}}}) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000180)=0x10000, 0x4) sendto(r2, 0x0, 0x20e, 0x4000, 0x0, 0xaf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0xe006, 0x101000) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f0000000000)={0x2, 0x1, [0x975c, 0x8, 0x2a, 0x80000001, 0x0, 0x6, 0x9, 0x3]}) 00:28:50 executing program 2: r0 = socket$kcm(0xa, 0x400000000803, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x4a, 0x0, 0x0) 00:28:50 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='7:2\t'], 0x4) 00:28:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace(0x4207, r3) waitid(0x0, r3, 0x0, 0xc, 0x0) 00:28:50 executing program 2: r0 = socket$kcm(0xa, 0x400000000803, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x18, &(0x7f0000000040), 0x348) [ 375.926031] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 375.926031] program syz-executor.0 not setting count and/or reply_len properly [ 375.957318] ptrace attach of "/root/syz-executor.5"[12271] was attempted by "/root/syz-executor.5"[12326] 00:28:51 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0506107, &(0x7f0000000080)) 00:28:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc00000000000000"], 0x29) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:51 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386105, &(0x7f0000000080)) 00:28:51 executing program 5: r0 = socket$kcm(0xa, 0x400000000803, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x30, 0x0, 0x0) 00:28:51 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r2, &(0x7f0000000980), 0xffffff4d) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000080)) 00:28:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) r2 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETA(r2, 0x5406, &(0x7f00000000c0)={0xfffffffffffffffd, 0x0, 0x0, 0x100000009b4b62b}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17}) [ 376.370301] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 376.370301] program syz-executor.0 not setting count and/or reply_len properly 00:28:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x40043000004, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[@ANYPTR64, @ANYRESDEC=r0, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYPTR, @ANYRES16=r0, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES32=r0]], @ANYRES16, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYRES32=r0]], 0x2e) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:51 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x440040, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) 00:28:51 executing program 3: r0 = socket$kcm(0xa, 0x400000000803, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x11, 0x0, 0x0) 00:28:51 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) 00:28:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc00000000000000"], 0x29) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:51 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000080)) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000400)=@nfc, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000280)=""/240, 0xf0}, 0x0) 00:28:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x40, 0x14100) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f00000000c0)) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x80800, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) [ 376.936102] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 376.936102] program syz-executor.0 not setting count and/or reply_len properly 00:28:52 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) sendto$unix(r0, &(0x7f0000000000)="96", 0x1, 0x20000000, 0x0, 0x0) 00:28:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc00000000000000"], 0x29) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:52 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x100) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000044c0)=""/92) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20200}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername(r1, &(0x7f00000043c0)=@ethernet={0x0, @random}, &(0x7f0000004440)=0x80) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x7) sendmsg$nl_generic(r1, &(0x7f0000001400)={0x0, 0x4c00007e, &(0x7f00000013c0)={&(0x7f0000000100)={0x14, 0x17, 0x101, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) shmget(0x3, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) ioctl$RTC_AIE_OFF(r1, 0x7002) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000180)={0x3, 0x800, 0x5, 0xf33}) getpeername$inet(r4, &(0x7f0000000080), &(0x7f00000000c0)=0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001a40)={'dummy0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000005bc0)={{{@in6}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000005cc0)=0xe8) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) sendmmsg(r4, &(0x7f0000006d80)=[{{0x0, 0x0, &(0x7f0000005b40)=[{&(0x7f0000005a80)="c3e2372e10feab3cd96362e4e8d52069d2ad73a0f9058d2fd02a64f2b5d110a0285ee228a585bec314034c5c191db2af372fa41ec61df5a42de79f64413869ba4777ff68bc491ea9511da1e06ec25b768df22f2c8aec5f5c0b856627d3cec1f4c40f27b3ab341f7c324f7e8923d533aaa5ec8e13a9ad7ed5c78fa3965d3232", 0x7f}], 0x1, 0x0, 0x0, 0x4}, 0x10001}, {{&(0x7f0000006580)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @loopback}, 0x3, 0x0, 0x1, 0x4}}, 0x80, &(0x7f0000006940)=[{0x0}], 0x1, 0x0, 0x0, 0x24040095}}], 0x2, 0x40000) r5 = dup(r3) r6 = semget(0x1, 0x3, 0x0) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="40f8157c0000005d50f9f40100000007f1000000000000e1ff000061b40000efbac49fb695502e5e7d81fd7f831818ffb17854195d7afa6eeae198518f79f90a0fd03757b4fb6670ef1b77fad90f11c22283a1ffffffde65d21a0cd630e833d9bfddd0f79471ddca6d659d0d16aaaf3cbfa3321da585ea97a433b9762d2731d6c24551b5f1a710373d641f56475c9339de847245b7620a57ec18b22d7eb35c661c15995aba16847ae634d5ca0ff175e4ac884c690362c1a077700da066a22ca64b919a840e755da222ea23ed8eefe8cfdc4f202ac9815c6db93b0797b079fc48a78cb1c8191216c863ab9000"], 0xec) ioctl$KDMKTONE(r5, 0x4b30, 0x0) semctl$GETALL(r6, 0x0, 0xd, &(0x7f0000004380)=""/46) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000006f40)=ANY=[@ANYBLOB="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"], 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000), 0x0) read$FUSE(r7, &(0x7f0000001680), 0x1000) [ 377.522144] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 377.522144] program syz-executor.0 not setting count and/or reply_len properly 00:28:52 executing program 2: socket$kcm(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'veth1_to_team\x00', 0x1000}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x28}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x9, 0x10}, 0xc) r2 = socket$kcm(0x2, 0x1000008000000006, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000000c0)=r1, 0x4) sendmsg$kcm(r2, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="faa71d7f3c56c0e8c8daa79d"], 0xc) 00:28:52 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() capset(&(0x7f0000000040)={0x20080522, r0}, &(0x7f0000000140)={0xfffffffffffffffd}) 00:28:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) [ 377.792723] hrtimer: interrupt took 32796 ns 00:28:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:53 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000080)) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000400)=@nfc, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000280)=""/240, 0xf0}, 0x0) 00:28:53 executing program 2: r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f00000002c0), 0x161) 00:28:53 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) close(r0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\xff', 0x241, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000240)={0x0, &(0x7f0000000100)}) write$cgroup_type(r2, &(0x7f0000000080)='threade\xff\xff', 0xffffffba) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x40, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000001740)}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(0x0, 0x0, 0x0, r1, 0x1) r5 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4001fc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000300), 0x3) 00:28:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETA(r2, 0x5406, &(0x7f00000000c0)={0xfffffffffffffffd, 0x0, 0x0, 0x100000009b4b62b}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17}) 00:28:53 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$P9_RRENAME(r0, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 00:28:53 executing program 5: r0 = socket$kcm(0xa, 0x400000000803, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x4b, &(0x7f0000000040), 0x348) 00:28:53 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r1, 0x1, 0x2e, &(0x7f00000002c0)=r0, 0x161) 00:28:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x80000, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000440)=ANY=[@ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES16=r0, @ANYBLOB="fbbb74f4db98d115bcbac04f427ed85b2984595af142fb664b29b6be9610e4f3f81f51114ae165b6228867798d93aa2d33ff4576d3fc4e19b30afbff969b50c15bbbc437b44d7f6fc0ef088f821b186756e29844f82864cd59bf39c769b4fc4ea593789e1b26ed3e81d61b0e08bec9b11fe41fde0adb318023acf442b7dabe12fbea5b0635ed3286fb0f70c17579b97b17d2af9ae0d3ceeb698faae11c6cb9a40c46cc2c5f7c191e0fe5147986f82efe99350602cb40cb431ca1cb2c6b332218897e8566381d67c9bdf8733153087875af721a2c74cbe759fd39fc191bfc72408ab66fe19b90b84ccc5ed5a8df500cbc52ea7aa0383a5230148ba55300ab2afce59a21d75d", @ANYRESDEC=r0, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYPTR], @ANYRESHEX=r0, @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="32d0e4577d080c41ec4402aefd61f8ef148b12e9202f4d1677f8f0b38b3daeff98a27ea74ed9e265c6e11c4696e7c46c7a", @ANYPTR, @ANYRESHEX=r0, @ANYPTR, @ANYRES32=r0, @ANYRES64=r0], @ANYBLOB="b42d4c34344587d189faa72427a2b4f810547e9c232ddf25527a82a1efc83195dbe278d4a971f34b49ab1824dacd3ffe7c6af703bb1b12079dfa4be1d0319972949dcb20b2"], @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRESDEC=r0], @ANYRES64=0x0, @ANYRESOCT=r0, @ANYBLOB="75c40b25a4aee1f56d87319bf4b4b0ca47118879ad4952a0f0d5de3e7efa6973a1f2fe45e56b849ee2913dd6721e754f586a7b7d05a5d455ae7b0fa8c9e712451f1d8b87f1daca6c6f7181d091526595255ebbd6c4a651f18c7c67bc2edbad61032d"], 0x61f60ff5) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000180)={0x2b, 0x3}) 00:28:53 executing program 4: eventfd2(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) 00:28:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:53 executing program 5: r0 = socket$kcm(0xa, 0x400000000803, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x4b, 0x0, 0x0) 00:28:54 executing program 2: r0 = socket$kcm(0xa, 0x400000000803, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x12, 0x0, 0x0) 00:28:54 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000080)) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000400)=@nfc, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000280)=""/240, 0xf0}, 0x0) 00:28:54 executing program 5: r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f00000002c0), 0x161) 00:28:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) r1 = socket$inet6(0xa, 0x804, 0x9a) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='hwsim0\x00', 0x10) getsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x40180) ioctl$BLKRRPART(r2, 0x125f, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:54 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xa, 0x82, 0xb, 0x200000080}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f00000005c0), 0x0}, 0x20) 00:28:54 executing program 5: r0 = socket$kcm(0xa, 0x400000000803, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x4c, 0x0, 0x0) 00:28:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\a\x00\nt!!\x00\vT*', @ifru_names='bond_slave_1\x00\xff\xff\xff'}) 00:28:54 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) [ 379.789596] bond0: Releasing backup interface bond_slave_1 00:28:54 executing program 2: r0 = socket$kcm(0xa, 0x400000000803, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0xb, &(0x7f0000000040), 0x348) [ 379.938681] capability: warning: `syz-executor.5' uses 32-bit capabilities (legacy support in use) 00:28:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:55 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000080)) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000400)=@nfc, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000280)=""/240, 0xf0}, 0x0) 00:28:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="56ff55"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:28:55 executing program 5: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r2, &(0x7f0000000980), 0xffffff4d) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) close(0xffffffffffffffff) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000080)) 00:28:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) socket(0x1, 0x5, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x10000) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000080)=""/19) write$binfmt_elf64(r1, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffff9, 0x9b, 0x8, 0x8000, 0x6, 0x3, 0x3e, 0x2, 0x3c, 0x40, 0x12c, 0x4, 0x2, 0x38, 0x1, 0xae, 0x6, 0x3}, [{0x6474e557, 0x5, 0x10001, 0x9, 0x1ff, 0x5, 0xffffffff, 0x7}, {0x0, 0x7fffffff, 0x0, 0x1ff, 0x40000000000, 0x0, 0x100, 0xcc2a}], "b8c5058be4b4407716abe469739dcd70a8d3045c1c3de39c6761b21fac4d8e22bc35b14fe16183ad8aa8de07ca8d21a87457f15672d5edef9c20c762547d5a05746f737bb3ea6932341d74fa3c23b48c8c68a56bc6257de556f67a54b405af5ffeeae83b93a26e5c1ec20fd419accc059ae7b11d7e11bde559ea4931828a2998086a0b708b13fa9641f3e9e8e7", [[], [], [], [], []]}, 0x63d) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x1) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000001800), &(0x7f0000001840)=0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x3, 'tunl0\x00', 0x1}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:55 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000180), 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) geteuid() mount$fuseblk(0x0, 0x0, 0x0, 0x20, 0x0) getpeername$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) write$smack_current(r1, &(0x7f0000000080)='\x00', 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getpgrp(0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 381.111713] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 381.181698] bond0: Releasing backup interface bond_slave_1 00:28:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x200000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) [ 381.381125] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 381.381125] program syz-executor.0 not setting count and/or reply_len properly [ 381.687344] bond0: Enslaving bond_slave_1 as an active interface with an up link 00:28:56 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000001c0), 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)=@can, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f00000001c0)='wlan0\x00') bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 00:28:56 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000080)) 00:28:56 executing program 2: r0 = socket$kcm(0xa, 0x400000000803, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x22, &(0x7f0000000040), 0x348) 00:28:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x80001, 0x6) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000003e80)={0x0, 0x90, "b1f8f3e0ef0c41eb18ad59e21317d443f32b399b3b757bb04a3000ad49faf617b2fae6d5ad2ec51ccb34fdbeba21acc11c220f4e3c6b478c1621053f00fb160601462c8fd8037135c238ef0281516f7a8aca1f193afb47170427b479c25386a469adb9c04d4044aaddcc215db7d5322f490d65a24babf522292d85fad948a6887d584d2e1b4bc85269c3a76928ffa9b7"}, &(0x7f0000003f40)=0x98) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000003f80)={r2, 0x4, 0xef, 0x400, 0x6, 0x5}, &(0x7f0000003fc0)=0x14) 00:28:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:56 executing program 5: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) unlink(&(0x7f0000000240)='./file0\x00') [ 381.838083] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 381.838083] program syz-executor.0 not setting count and/or reply_len properly 00:28:57 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) close(r0) openat$tun(0xffffffffffffff9c, 0x0, 0x8100, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000380)=0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\xff', 0x241, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000240)={0x0, &(0x7f0000000100)}) write$cgroup_type(r2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000001740)="4974680bf77cac3729b2ae3662545ebabad45560b0268b477dcbd4df671b86eb87160acfa969e9d13150c61bf1f8591652e58ddc6dc7725341fe57327edaf915ee7f965b42be55ec0dc96b76e643c65bc48882008cc5fcb076b712f72c70572432e77567e364cd0743ba1c2d90f34504fd29688760efd1d8ca45f9a82c441ef47f05ff4cc116f8b3cc1e2eb8635bbb023d42e9beca833222e5896190238df8fc529c374fe9597f96264700fb3caea5216bf0a7f7d983cc8e769ea99237d4d47263041bd7f07c3400b9020192b85032d5d43b7d355c3eb32b148d325e17d28022ff61c8bf7f26053128ec8d18c8804d870ad467b05bb8b7a7748771a823a773afdf1c8210cb421aa27ee127ec74df28efaff62709bea286e59d3bb8983c3d58e37b572be431eb5817c575bc969a1139faa8f200ee5d8b125dd1d864564fd1fea6ce8594b90bda94ee09232e27d4554088db66cac625f43f7895211d5a57086dd8a35cdc363269be3df273cc898c3598bc7c55ca53c1edac911ff4e4febcdb85fcad02cc95b2e41f135e372ba42dc732aafecf3300b1ea1616c92016b309fa0b2d73074eceb47f06857eb681d5c23aa57b9655cb1447db6f94fbaeadebbcc504ef399124b2943f9ed3f4ffa18c8e81f0ded71f073609c1b84673c39bf11bf01a1c738f8a06e7dd3a61197c33d1a6c69347bd66c533eb87b276241d7ab798486aebf7e3e04d61bdfd56859b2ad2bd07d6d4f7202bd20dd0750e3f06c5a18042bbe6068899a59485392fd74910dbf2709e14a27499da30e14d8d6ae4169da5fde1b087b2b980babe902085e5bd7b03149d46a8587f5b9e04179381cc56be9084798afd4471c242d22b692b445880afb5c227acf8bc8c5cbeb13b09c65334a5122120d2862573bdabbedde1e60fd6f615f1d7e23bde3a5d25386011b66aaa7e27dd212a942a76be07d724df3597fdf6cf55cfb5f607db94b1307d3c90adae46195fd7630bbdae7815e3b24f18db3ede02ca0218a21885a166186818eea7cdd1ad7670e4d66bc94d01748564a17bff4cd7f3585e5c4d54891a0020eb7a0c565f9fc2e5e4f4b6af8d6b1dd9bd2519b7653e69d5db9edabad12d4b73f42f2e61a6917a39d913f71c4e41d12e1041987df2b3178f2283bef6e447b14ebc09a827ad73929d766a33190036137579f8fcde1df285ec85ef621538716604a7f78ee02277c37d622a684a9eb8a79575a9b8ca9db9732881244d3065c8b8c9a4e3dd95bd08983e7fd8ddee78b4d676b0c65ded45de0dc913d37583ffd0088fb6463c5fa7f4bcbf5c77f5ea14f11342843fdd3fffbfafb988f45a506afe806d46fd8fee0564a8f92c912c3a4452ee22f0081a39e4dfd5db2d2e5f7e9c24a603a73416971964ff7704e438cb69c17977a04492d5950457743f18d71db464183da67b5485fa5704665fad2b02d4909f7ed66d50cf91041b583baf08fe8afc0019876b10d67c6a2da366ff516ef96f003f7395bcbce397705159e14a01dd078844f1ac32b46e0dcf8b1fac8aa6d31ea9cacaf0da4eed40ba4f043b9e1ea1b3ac3793f4af942687dd7dcf653dc3d236c7eca0d2c94be7f84cbb9d8efd761b13c6e69b3a4b390c599f7ab11acae2b69ef78f12b4becf055b1c3ab219b20dd0c641405ac76302eb278e957ccc532f418ff08e7573c14073453b6417dcd393ee2b85950edafe6dc37849acfdfab79c229668abb19f7d3fa3c88c55f2e81e88f8f58df7e9433dbf4c05ffa86253a21c295a0287e9b60a0dad0b3be2b2e31f95f0a2228a2d0aee10fd732681096a8e96258b88f8723d784b544f27b95d6788bfb3050ddc0f841b96e8f1dc7e64f85e81136eaf4f3263aaefd9476c45467f85f3d411d8192e1b638d695a075527c5ab9703528dece56dab7e8b62652de86d0113c0d43f9445d74639edb0269e44baeb2b89be8c695dadab15d3905db81caa1f0ef01da9bc1cce3470dd613226ce95aa4cb8ec41d72833b83dec24e9c2fe6f11ae2a67ecb499badc6c4397f893a5e633b343e33bba3857a681f470141484dfe18ca1a89398850353e4b837c39e8f8027714b96c1fa3fc7a49b2737a1cad14b2a1d65db5f0c8e8f343a473c060b2dcfd7973dce6c3ebe4631839d59cf127bd7d6a1ec32eab8cd2616b20169ca9859a8ce338704e4a6ca0b49eecfac2cae7664baf894a5f8cef5022b7eb0fd49534b89a1cd12a227fde429bd0075bdcc09adc377faa5b971568449fbc353d9bf712a", 0x641}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0xa, 0x5, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x4001fc) setsockopt$sock_attach_bpf(r5, 0x1, 0xd, &(0x7f0000000300), 0x3) 00:28:57 executing program 2: r0 = socket$kcm(0xa, 0x400000000803, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, 0x0, 0x0) 00:28:57 executing program 5: r0 = socket$kcm(0xa, 0x400000000803, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x31, &(0x7f0000000040), 0x348) 00:28:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:57 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r3 = accept$alg(r1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000300)) fcntl$setstatus(r3, 0x4, 0x2800) r4 = dup(r0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f00000001c0)) fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) recvmmsg(r3, &(0x7f00000001c0), 0x400000000000153, 0x0, 0x0) 00:28:57 executing program 2: r0 = socket$kcm(0xa, 0x400000000803, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x30, &(0x7f0000000040), 0x348) [ 382.390026] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 382.390026] program syz-executor.0 not setting count and/or reply_len properly 00:28:57 executing program 4: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r2, &(0x7f0000000980), 0xffffff4d) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000080)) 00:28:57 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) 00:28:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 00:28:57 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='7:2\t'], 0x4) 00:28:57 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'yam0\x00\x01\x17\x8b\x00', 0x8001}) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000040)={0x0}) openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x0, 0x0) getresgid(0x0, 0x0, 0x0) r2 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r2, 0x1, 0x0) [ 382.930962] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 382.930962] program syz-executor.0 not setting count and/or reply_len properly [ 383.124088] ptrace attach of "/root/syz-executor.5"[12271] was attempted by "/root/syz-executor.5"[12620] [ 383.140766] ptrace attach of "/root/syz-executor.5"[12271] was attempted by "/root/syz-executor.5"[12620] 00:28:58 executing program 2: r0 = creat(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000040), 0x1c) r3 = dup2(r2, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000180)=[@window={0x3, 0x0, 0x7f}, @sack_perm], 0x20000000000000d0) r4 = dup2(r1, r0) ioctl$FICLONE(r4, 0x40049409, 0xffffffffffffffff) 00:28:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000440)='sysfs\x00\x01G\xa3L_\xb1+\x00\xed\x90\xbe\xe9N\a\xd0\xc2\xbb\xb8\xf3|', 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000300)='./file0\x00', 0xa500295c) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) [ 383.427826] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 383.427826] program syz-executor.0 not setting count and/or reply_len properly 00:28:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000101200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:28:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:58 executing program 4: 00:28:58 executing program 5: [ 383.750545] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 383.750545] program syz-executor.0 not setting count and/or reply_len properly 00:28:58 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) 00:28:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80001, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000240)={0xb, 'syz0\x00', 'syz1\x00', 'syz1\x00', 0x54, 0x40, 0x20, 0xcb, 0x2, 0x3, "11a3fee05b98e5b2f4c9c5345355b111938684a7fe3a74c90917556b822aac9028c89716adcca72d7b82930040f5eeeebe7935fc0035344f8a166956848cb906378602b8a89e9fb755115893fc27671be02c7e2b"}, 0x16c) 00:28:58 executing program 2: r0 = socket$kcm(0xa, 0x400000000803, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x49, 0x0, 0x0) 00:28:59 executing program 4: r0 = socket$kcm(0xa, 0x400000000803, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x36, &(0x7f0000000040), 0x3) 00:28:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380), 0x0) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @loopback}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) dup3(r3, r2, 0x0) 00:28:59 executing program 2: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) alarm(0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x5421, 0x20001005) [ 384.378101] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 384.378101] program syz-executor.0 not setting count and/or reply_len properly 00:28:59 executing program 4: 00:28:59 executing program 2: 00:28:59 executing program 5: 00:28:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380), 0x0) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:28:59 executing program 4: [ 384.928879] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 384.928879] program syz-executor.0 not setting count and/or reply_len properly 00:29:00 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) 00:29:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x2, 0x5, 0x100, 0x5, 0x10, 0x400, 0x1c, 0x1ff, 0x6, 0x3}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:29:00 executing program 2: 00:29:00 executing program 5: 00:29:00 executing program 4: 00:29:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380), 0x0) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:29:00 executing program 2: 00:29:00 executing program 5: 00:29:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x42202, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x401, 0x200000) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x4}) [ 385.343327] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 385.343327] program syz-executor.0 not setting count and/or reply_len properly 00:29:00 executing program 4: 00:29:00 executing program 2: 00:29:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{0x0}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) [ 385.768895] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 385.768895] program syz-executor.0 not setting count and/or reply_len properly 00:29:01 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000080)) 00:29:01 executing program 5: 00:29:01 executing program 4: 00:29:01 executing program 2: 00:29:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{0x0}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:29:01 executing program 5: 00:29:01 executing program 4: 00:29:01 executing program 2: 00:29:01 executing program 1: lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:29:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{0x0}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:29:01 executing program 5: 00:29:01 executing program 4: [ 386.656838] sg_write: 1 callbacks suppressed [ 386.656877] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 386.656877] program syz-executor.0 not setting count and/or reply_len properly 00:29:02 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000080)) 00:29:02 executing program 2: 00:29:02 executing program 5: 00:29:02 executing program 4: 00:29:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:29:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x200000) sysfs$2(0x2, 0x3f, &(0x7f0000000240)=""/252) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x80000, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f0000000340)=0x1) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={[], 0x8, 0x2ce, 0x5, 0x6, 0x7, r2}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) [ 387.149239] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 387.149239] program syz-executor.0 not setting count and/or reply_len properly 00:29:02 executing program 4: 00:29:02 executing program 2: 00:29:02 executing program 5: 00:29:02 executing program 2: 00:29:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:29:02 executing program 4: [ 387.877596] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 387.877596] program syz-executor.0 not setting count and/or reply_len properly 00:29:03 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000080)) 00:29:03 executing program 5: 00:29:03 executing program 2: 00:29:03 executing program 4: 00:29:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) 00:29:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000000000040038000000000000000000000000000000"], 0x2a) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) [ 388.164964] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 388.164964] program syz-executor.0 not setting count and/or reply_len properly 00:29:03 executing program 5: 00:29:03 executing program 2: 00:29:03 executing program 4: 00:29:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:29:03 executing program 2: 00:29:03 executing program 4: [ 388.697332] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 388.697332] program syz-executor.0 not setting count and/or reply_len properly 00:29:04 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000080)) 00:29:04 executing program 5: 00:29:04 executing program 4: 00:29:04 executing program 2: 00:29:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:29:04 executing program 1: syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x7, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x810000, 0x1, 0x3}) 00:29:04 executing program 5: [ 389.175557] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 389.175557] program syz-executor.0 not setting count and/or reply_len properly 00:29:04 executing program 4: 00:29:04 executing program 2: 00:29:04 executing program 5: 00:29:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x16a) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:29:04 executing program 4: 00:29:05 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000080)) 00:29:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:29:05 executing program 2: 00:29:05 executing program 5: 00:29:05 executing program 4: 00:29:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) getsockopt$inet6_dccp_buf(r1, 0x21, 0xc2, &(0x7f0000000080)=""/17, &(0x7f00000000c0)=0x11) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) [ 390.140087] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 390.140087] program syz-executor.0 not setting count and/or reply_len properly 00:29:05 executing program 4: 00:29:05 executing program 5: 00:29:05 executing program 2: 00:29:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x412480, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000380), 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cpuset\x00') r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040080}, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:29:05 executing program 4: 00:29:05 executing program 5: 00:29:06 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, &(0x7f0000000080)) 00:29:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[], 0x0) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:29:06 executing program 2: 00:29:06 executing program 4: 00:29:06 executing program 5: 00:29:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x32000, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x8001}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r2, 0x7fffffff}, 0x8) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:29:06 executing program 5: 00:29:06 executing program 4: [ 391.212346] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 391.212346] program syz-executor.0 not setting count and/or reply_len properly 00:29:06 executing program 2: 00:29:06 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, &(0x7f0000000080)) 00:29:06 executing program 4: 00:29:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[], 0x0) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:29:06 executing program 2: 00:29:06 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40000, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000000c0)=r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)) 00:29:06 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, &(0x7f0000000080)) 00:29:06 executing program 5: 00:29:06 executing program 2: [ 391.838270] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 391.838270] program syz-executor.0 not setting count and/or reply_len properly 00:29:07 executing program 4: 00:29:07 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000080)) 00:29:07 executing program 5: 00:29:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[], 0x0) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:29:07 executing program 4: 00:29:07 executing program 2: 00:29:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x4, 0xfff}, 'port1\x00', 0x0, 0x80000, 0x4, 0x1, 0x2, 0x2, 0xdf, 0x0, 0x4, 0xf31}) accept4$unix(r1, &(0x7f0000000240), &(0x7f0000000180)=0x6e, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:29:07 executing program 5: [ 392.383184] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 392.383184] program syz-executor.0 not setting count and/or reply_len properly 00:29:07 executing program 2: r0 = socket$kcm(0xa, 0x400000000803, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x3, &(0x7f0000000040), 0x348) 00:29:07 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000380)=0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\xff', 0x241, 0x0) write$cgroup_type(r1, &(0x7f0000000080)='threade\xff\xff', 0xffffffba) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0xa, 0x0, 0x0) close(0xffffffffffffffff) socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4001fc) 00:29:07 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000380)=0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\xff', 0x241, 0x0) write$cgroup_type(r1, &(0x7f0000000080)='threade\xff\xff', 0xffffffba) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0xa, 0x0, 0x0) close(0xffffffffffffffff) socket$kcm(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 00:29:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) [ 392.979288] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 392.979288] program syz-executor.0 not setting count and/or reply_len properly 00:29:08 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) close(r0) openat$tun(0xffffffffffffff9c, 0x0, 0x8100, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000380)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\xff', 0x241, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000240)={0x0, &(0x7f0000000100)}) write$cgroup_type(r2, &(0x7f0000000080)='threade\xff\xff', 0xffffffba) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x40, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000001740)="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", 0x641}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) close(r1) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x4001fc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000300), 0x3) 00:29:08 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000080)) 00:29:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:29:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[], 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x20, 0x20002) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf, 0x1f, 0x1, 0xffffffffec8e75da}, 0xf) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) [ 393.415062] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 393.415062] program syz-executor.0 not setting count and/or reply_len properly 00:29:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:29:08 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000680)='/dev/vbi#\x00', 0x0, 0x2) r1 = getpid() write$cgroup_pid(r0, &(0x7f00000006c0)=r1, 0x12) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000300)=0x8000000400000d) write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) r3 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x8002) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) r4 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1ff, 0x4400) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f00000002c0)=@generic={0x3, 0xfff, 0x6}) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000180)={0x1c, r5, 0x314, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0xfffffffffffffc9f}, 0x1, 0x0, 0x0, 0x4}, 0xc1) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}}}, &(0x7f0000000140)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@local, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000540)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@local, @in=@rand_addr=0x1, 0x4e24, 0x1000, 0x4e23, 0x0, 0xa, 0xa0, 0x0, 0xff, r6, r7}, {0x100, 0x3, 0x1, 0x5, 0x100000001, 0xfffffffffffffff7, 0x2, 0x2}, {0x4, 0x2, 0x5, 0x8000}, 0xcb, 0x6e6bb0, 0x2, 0x1, 0x2, 0x2}, {{@in=@loopback, 0x4d6, 0x3f}, 0xa, @in=@remote, 0x3506, 0x3, 0x2, 0xaf, 0x3ff, 0x8, 0x200}}, 0xe8) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)) [ 393.707424] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 393.707424] program syz-executor.0 not setting count and/or reply_len properly 00:29:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000"], 0x15) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:29:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x8000000000000c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000200)) write$binfmt_elf32(r0, &(0x7f0000000600)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYRES64=0x0, @ANYRES64=r0, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRESDEC=r0]], @ANYRESOCT=r0, @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRES32=r0], @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYPTR64, @ANYRESHEX=r0, @ANYRES64=0x0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYPTR, @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYRESOCT=r0, @ANYRES64=r0], @ANYBLOB="8ee9d73ee5e9dfe209d77a5a4d78b5f70dfa7d94b92f601080fdf52f7ee49ee2c557115a96ea1325c1eac1c008d1f48a06e1513dcf37872965b73bcaddfe21d3f9b0c611209bbe7eb49a206d421a7635a0e0ec77fc05a3ad4bf221820677103cf94df11ddfa6288c13eea895658ac44291c6a4132b861fcb6d17e8db593fb9978ce7c75cdd31fa904875be04009931e57a6a752685b079c4db33cfbe3fc043ea964e1a3143fedcac2bf30be997cfe7e1", @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYPTR64, @ANYRESHEX=r0, @ANYRES32=0x0]], @ANYPTR64, @ANYRES32=r0, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYPTR, @ANYBLOB="507995d56c1747d749c932a1034dd4176ae99bece2c9131c23c2fe68c3e6ebcc585f8055f01cc54db2ca262943f32cd61b6b1cb704004816ceef5fd6a11bd37721384301cd46b2cba76724c3846a3007e8fd6c7e9ec8ac26cb2099fdcbdf15178e38ea0f31e2ebd539caf61ae22671c1ccf5004771d957142e7e88ef26543917e578daa2b4636c6d0e7ac7befa463acd58d411273e650f24ea4b73f200e9035bd2ebf93c55fcbc035e7ae0130a7b2b60da180cd22e49ad274dac1b3fc23d42ae829893a1645b790570b8b9153063b56759281cb41a231e5301cf1f197a9a5787dfa78845bff7754ce06a1c55cde09f4080d8bc"], @ANYRES64, @ANYBLOB="019706ba132894727292381afc2be5ed6427df1d13cf25c707bd16ef02860f689db259bc75a70a168707c47af348564cf1839e385593b2834fe20ba5d31e5984fbcc70e73067e8fab4b0514db092a616843bcbd4ca83fc54641fed", @ANYRESDEC=r0], 0xffffffffffffff11) ioctl$TCSBRKP(r0, 0x5425, 0x49) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x50f2488d9d773528, 0x0) sendto(r1, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:29:09 executing program 2: 00:29:09 executing program 4: [ 394.197850] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 394.197850] program syz-executor.0 not setting count and/or reply_len properly 00:29:09 executing program 5: clone(0xbffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) 00:29:09 executing program 3: socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000080)) 00:29:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000"], 0x15) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:29:09 executing program 2: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x3}, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x0, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 00:29:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x1ce0}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000280)={0x4, 0x0, 0x10001}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x14000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0x99b4, 0x0, 0x2, 0xfffffffffffffffd}) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x30000, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000040)={r1}) sync_file_range(r0, 0x20, 0xffffffffffffffff, 0x2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80, 0x0) getpeername$packet(0xffffffffffffff9c, 0x0, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0106434, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5}) open$dir(&(0x7f0000000380)='./file0\x00', 0x1, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000001c0)={@local, 0x4, 0x2, 0xff, 0x2, 0x9, 0x5}, &(0x7f0000000480)=0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x10d101, 0x0) msgget$private(0x0, 0x11) msgget(0xffffffffffffffff, 0x40) r4 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r5 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f00000003c0)={'syz', 0x0}, &(0x7f00000006c0)="f01a713b5a4f0995bd1336ee9f80d7ba4105d3d6de4d9d691b139d73e647c7a499b18113cf8fb96a882dc640d22ad7540a89b87eb47bec8637fa4b7d558cd3c90b762e0200000000000000906e3c3c68a03f84d390a78d655e85929314b666c5e737f8b05afa53170c24c16d5a3b0b3d530d66548c208c9d430e6513d774425aa7e41c45782c84e21cc3503a45927b1f449890ba661c067e171defeadbb6c53a6c889aed82f00989f038a875ad56c416a1b77d4de556313a2e84b98ab2af8edcc18838fc3b5c1588f6e45a129364b6c74d8f848f74ded7119d5dd743f4f92cb1d3af2b26ea4f88d3efe0e1070196b946563c775abe091eaef6fca6d4252791feb42e51347ccd3aa7afa61941702eb035040df9f88b4884a989ca7efbf8491b9c091050b8e493038b6c1a", 0x12a, r4) r6 = geteuid() keyctl$chown(0x4, r5, r6, 0x0) 00:29:09 executing program 1: syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200080) pipe(&(0x7f0000000140)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x14) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0x82000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f00000000c0)=0xc) 00:29:09 executing program 3: socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000080)) [ 394.672318] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 394.672318] program syz-executor.0 not setting count and/or reply_len properly 00:29:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0xa, 0xc, 0x100000000000914, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), 0x0}, 0x20) 00:29:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[], 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) writev(r0, &(0x7f0000002480)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000000000)="778938cc5bc386b81f743361f7111d011032d83ec1fff270433b647a9c5b0efd3039c9", 0x23}, {&(0x7f0000000080)="609bd3b88171b160d3f10117a00f302e667f849255ef1a6cf16901caf1b1d280e3ff47f316eb54e701761d637e25408195f6c0977b314cc2355a582aa2bf09ade27971c0845ca10daa84", 0x4a}, {&(0x7f0000001200)="5c2224b511de3ed863e9285e4d56758fb31dcfcbca297a0984cc3f6f8105764024bf953893f13d914f858069bcd47dc7b8280b2a2e63e26f964b08a74fd21425b1dc311bba6874ffd1aa6e1c75b9dec5f63eac5f0e0211fcc9e17e0359426e7a4591c6959f52e193f1cda9cc8d8713437bb8103d3a3eb037248a5dc8f2e8cb93e9e6bb5d757e3cd9406ae30f1b0f7059b7c99a311cbfe70e110a10dacb7bcda42d63bdcc0aa12005faa756f7e17d4d0bef1b5aa55e01bb0c3b27c2", 0xbb}, {&(0x7f0000000100)="7f9a6a15ed57cf5bcd1da16ba2b0f18f1f8e5095", 0x14}, {&(0x7f00000012c0)="614688c7e6ef9a87ad4d32130dad5f97ea20f1e17d7311047de6cf2f663f99f84abb7b11e1c035bc6150d383d85fc1bc47dfdb5aa8680a77de3586bdb35a4e6ec96fb6aeb94a94f09b0cbec817191127f236a8c3c1e799248469", 0x5a}, {&(0x7f0000001340)="a84458c23d801648957c9cf8d2331b49612ca77f166966b415d25ba51aaabd5ef71fa08b735a5f5a034ca7338250d1b48c9959b36c441b4ae49a20a25711e651480e4da9bf68785da9822371fbce087edfa6820c3f26e86d711af3e86e9c8dbc05d5cee487c3a601ad0379fad0b3e4ae7a1cc81efb6c683ca3baeadcd3cfe3fb6d9a56d6faa880009f7b8e1d95dedbc036bf095bdbc32d094e6b4a28f5aacbf8ed502c615c5c7dda11", 0xa9}, {&(0x7f0000000180)="35e2f7a7a9ded13121f3631caa121210e6198ed694657e0c1e82e9f39a7521365524912e58b0dd33af35186df0bd66f52bc31ecd38fb9574c9508cba7c5a", 0x3e}, {&(0x7f0000001400)="45b6eb19dad2011f5ed01aabb396bb8dbd9149fb18581a0822fcabc35eb688028f92c23e9f05ef3d6eccd97ef0d5c69a923dc82cda9d6804720b735e99c46d6176cce21309fede63d74387b851a21dc2356da08057c2d3bdf0115bba669f96e27cd07b8adcff8a3b0eeef9c66657a039b4f613a80d09657cd572f015c1ed", 0x7e}, {&(0x7f0000001480)="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", 0x1000}], 0xa) 00:29:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f4600000000000000001000000000000000000000"], 0x15) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:29:10 executing program 3: socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000080)) [ 395.113523] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 395.113523] program syz-executor.0 not setting count and/or reply_len properly 00:29:10 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000000)=@in={0x2, 0x4e22, @initdev}, 0x80, 0x0}, 0x20000084) 00:29:10 executing program 5: r0 = socket$inet(0x2, 0x3, 0x6) sendmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000000580)=@nl=@unspec, 0x80, &(0x7f0000002a40), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="100000000000000001000000145af1b38324ec5df1bf8e00ba0f39ded3ff30ed6004000000349cc346e1a62b56e9c9d40832f157e0ecbe14b09d79d4fbe8708c50"], 0x41}}], 0x1, 0x0) 00:29:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) clock_gettime(0x0, &(0x7f00000092c0)={0x0, 0x0}) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000093c0)='/proc/capi/capi20\x00', 0x10000, 0x0) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000009400)={0x8000000, 0x9, 0x4, 0x40200000, {0x77359400}, {0x2, 0x0, 0x0, 0x2, 0x40, 0x4, "fda13c91"}, 0x4, 0x2, @userptr=0x5b9, 0x4}) recvmmsg(0xffffffffffffff9c, &(0x7f0000009040)=[{{&(0x7f0000004180)=@ethernet, 0x80, &(0x7f0000004600)=[{&(0x7f0000004200)=""/195, 0xc3}, {&(0x7f0000004300)=""/173, 0xad}, {&(0x7f00000043c0)=""/4, 0x4}, {&(0x7f0000004400)=""/14, 0xe}, {&(0x7f0000004440)=""/128, 0x80}, {&(0x7f00000044c0)=""/101, 0x65}, {&(0x7f0000004540)=""/181, 0xb5}], 0x7}, 0x8}, {{&(0x7f0000004680)=@ipx, 0x80, &(0x7f0000004940)=[{&(0x7f0000004700)=""/99, 0x63}, {&(0x7f0000004780)=""/139, 0x8b}, {&(0x7f0000004840)=""/209, 0xd1}], 0x3, &(0x7f0000004980)=""/153, 0x99}, 0x6}, {{&(0x7f0000004a40)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000004b40)=[{&(0x7f0000004ac0)=""/91, 0x5b}], 0x1}, 0x1}, {{&(0x7f0000004b80)=@nfc, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000004c00)=""/102, 0x66}, {&(0x7f0000004c80)}, {&(0x7f0000004cc0)=""/4096, 0x1000}], 0x3, &(0x7f0000005d00)=""/138, 0x8a}, 0x1}, {{&(0x7f0000005dc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000005e40), 0x0, &(0x7f0000005e80)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000007140)=[{&(0x7f0000006e80)=""/11, 0xb}, {&(0x7f0000006ec0)=""/47, 0x2f}, {&(0x7f0000006f00)=""/222, 0xde}, {&(0x7f0000007000)=""/96, 0x60}, {&(0x7f0000007080)=""/168, 0xa8}], 0x5, &(0x7f00000071c0)=""/33, 0x21}, 0xedc}, {{0x0, 0x0, &(0x7f0000007480)=[{&(0x7f0000007200)=""/63, 0x3f}, {&(0x7f0000007240)=""/76, 0x4c}, {&(0x7f00000072c0)=""/197, 0xc5}, {&(0x7f00000073c0)=""/168, 0xa8}], 0x4}, 0x3f}, {{&(0x7f00000074c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000008800)=[{&(0x7f0000007540)=""/234, 0xea}, {&(0x7f0000007640)=""/171, 0xab}, {&(0x7f0000007700)=""/4096, 0x1000}, {&(0x7f0000008700)=""/114, 0x72}, {&(0x7f0000008780)=""/74, 0x4a}], 0x5, &(0x7f0000008880)=""/10, 0xa}, 0x4}, {{&(0x7f00000088c0)=@rc, 0x80, &(0x7f0000008d40)=[{&(0x7f0000008940)=""/153, 0x99}, {&(0x7f0000008a00)=""/155, 0x9b}, {&(0x7f0000008ac0)=""/105, 0x69}, {&(0x7f0000008b40)=""/38, 0x26}, {&(0x7f0000008b80)=""/140, 0x8c}, {&(0x7f0000008c40)=""/213, 0xd5}], 0x6, &(0x7f0000008dc0)=""/238, 0xee}, 0xffff}, {{&(0x7f0000008ec0)=@ax25={{}, [@bcast, @netrom, @bcast, @null, @default, @null, @rose, @bcast]}, 0x80, &(0x7f0000009000)=[{&(0x7f0000008f40)=""/9, 0x9}, {&(0x7f0000008f80)=""/99, 0x63}], 0x2}, 0x5}], 0xa, 0x40012040, &(0x7f0000009300)={r1, r2+10000000}) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000009340)=0x10, 0x4) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) clock_gettime(0x0, &(0x7f00000040c0)={0x0, 0x0}) recvmmsg(0xffffffffffffff9c, &(0x7f0000003f80)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000000)=""/36, 0x24}, {&(0x7f0000000100)=""/48, 0x30}], 0x3, &(0x7f0000001240)=""/4096, 0x1000}, 0xffff}, {{&(0x7f0000002240)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000024c0)=[{&(0x7f00000022c0)=""/57, 0x39}, {&(0x7f0000002300)=""/152, 0x98}, {&(0x7f00000023c0)=""/77, 0x4d}, {&(0x7f0000002440)=""/97, 0x61}], 0x4, &(0x7f0000002500)=""/103, 0x67}, 0x49}, {{&(0x7f0000002580)=@rc, 0x80, &(0x7f0000002700)=[{&(0x7f0000002600)=""/226, 0xe2}], 0x1, &(0x7f0000002740)=""/205, 0xcd}, 0x47}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000002840)=""/171, 0xab}, {&(0x7f0000002900)=""/190, 0xbe}, {&(0x7f00000029c0)=""/122, 0x7a}, {&(0x7f0000002a40)=""/4096, 0x1000}], 0x4, &(0x7f0000003a80)=""/209, 0xd1}, 0xd1c}, {{&(0x7f0000003b80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003c00)=""/228, 0xe4}, {&(0x7f0000003d00)=""/249, 0xf9}, {&(0x7f0000003e00)=""/205, 0xcd}], 0x3, &(0x7f0000003f40)=""/44, 0x2c}, 0x401}], 0x5, 0x20, &(0x7f0000004100)={r5, r6+30000000}) r7 = openat(0xffffffffffffffff, &(0x7f0000004140)='./file0\x00', 0x80, 0x0) sendto(r7, 0x0, 0xfffffffffffffd92, 0x100020000007, 0x0, 0x11e) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000005e40)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000004c80)={0xffffffffffffffff}, 0x13f, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000009380)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x7fff, @mcast2, 0x100}, r8}}, 0x30) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) [ 395.380431] raw_sendmsg: syz-executor.5 forgot to set AF_INET. Fix it! 00:29:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f46000000000000000010000000000000000000000000000400380000000000"], 0x20) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:29:10 executing program 3: socketpair(0x1, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000080)) [ 395.956179] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 395.956179] program syz-executor.0 not setting count and/or reply_len properly 00:29:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x1ce0}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000280)={0x4, 0x0, 0x10001}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x14000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0x99b4, 0x0, 0x2, 0xfffffffffffffffd}) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x30000, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000040)={r1}) sync_file_range(r0, 0x20, 0xffffffffffffffff, 0x2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80, 0x0) getpeername$packet(0xffffffffffffff9c, 0x0, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0106434, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5}) open$dir(&(0x7f0000000380)='./file0\x00', 0x1, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000001c0)={@local, 0x4, 0x2, 0xff, 0x2, 0x9, 0x5}, &(0x7f0000000480)=0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x10d101, 0x0) msgget$private(0x0, 0x11) msgget(0xffffffffffffffff, 0x40) r4 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r5 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f00000003c0)={'syz', 0x0}, &(0x7f00000006c0)="f01a713b5a4f0995bd1336ee9f80d7ba4105d3d6de4d9d691b139d73e647c7a499b18113cf8fb96a882dc640d22ad7540a89b87eb47bec8637fa4b7d558cd3c90b762e0200000000000000906e3c3c68a03f84d390a78d655e85929314b666c5e737f8b05afa53170c24c16d5a3b0b3d530d66548c208c9d430e6513d774425aa7e41c45782c84e21cc3503a45927b1f449890ba661c067e171defeadbb6c53a6c889aed82f00989f038a875ad56c416a1b77d4de556313a2e84b98ab2af8edcc18838fc3b5c1588f6e45a129364b6c74d8f848f74ded7119d5dd743f4f92cb1d3af2b26ea4f88d3efe0e1070196b946563c775abe091eaef6fca6d4252791feb42e51347ccd3aa7afa61941702eb035040df9f88b4884a989ca7efbf8491b9c091050b8e493038b6c1a", 0x12a, r4) keyctl$chown(0x4, r5, 0x0, 0x0) 00:29:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001880), 0x4) 00:29:11 executing program 5: r0 = socket$inet(0x2, 0x3, 0x6) sendmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000000580)=@nl=@unspec, 0x80, &(0x7f0000002a40), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="100000000000000001000000145af1b38324ec5df1bf8e00ba0f39ded3ff30ed6004000000349cc346e1a62b56e9c9d40832f157e0ecbe14b09d79d4fbe8708c50"], 0x41}}], 0x1, 0x0) 00:29:11 executing program 3: socketpair(0x1, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000080)) 00:29:11 executing program 1: timer_create(0x2, &(0x7f0000000180)={0x0, 0x1c, 0x2, @thr={&(0x7f0000000000)="f1c9a8a09d51445bd052359138c82f5ba2dae748d299d5dfb7", &(0x7f0000000080)="e7255c5076abb3448791e77c7819df123e81f659ae206e31316912f3ee7e2357d94f90cccd26e2064ef00a27a5fdca4ac0de85c766333c2e612a30a679fb37d208818fefe2bbb74c8640f7e1e0754f5aae8b880caa1eb4f924b06c47a5d95cda62c47a00992612513047ca2723ff14fc80d3fc93ea2f944e69244b422d5446c557ce675e9b9876ff8a4bc8d7f64c096681a9ecd28e07b4f937cd277e0dd685ffaf111cc6dfff2cb816894ed2243f2226a3f3a3fd1541a404af1687991d45"}}, &(0x7f0000000240)=0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file1\x00') timer_settime(r0, 0x0, &(0x7f00000002c0)={{0x0, 0x1c9c380}, {r1, r2+30000000}}, &(0x7f0000000300)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/btrfs-control\x00', 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000380)={0x2, 0xfc33, 0x4}, 0xc) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)) lgetxattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@random={'security.', 'trustedeth1eth1\x00'}, &(0x7f0000000440)=""/183, 0xb7) 00:29:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f46000000000000000010000000000000000000000000000400380000000000"], 0x20) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) [ 396.832334] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 396.832334] program syz-executor.0 not setting count and/or reply_len properly 00:29:12 executing program 3: socketpair(0x1, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000080)) 00:29:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f46000000000000000010000000000000000000000000000400380000000000"], 0x20) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:29:12 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @dev}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/mcfilter\x00') readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/78, 0x4e}, {&(0x7f00000001c0)=""/230, 0xe6}], 0x2) 00:29:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1000008000000006, 0x0) socket$kcm(0x29, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000000c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000003d00)={0x0, 0x0, 0x0}, 0x0) 00:29:12 executing program 3: socketpair(0x1, 0x1, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, &(0x7f0000000080)) [ 397.299897] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 397.299897] program syz-executor.0 not setting count and/or reply_len properly 00:29:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffffffffac, &(0x7f0000000080)) 00:29:13 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) read$rfkill(r0, 0x0, 0x104bf199) 00:29:13 executing program 3: socketpair(0x1, 0x1, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, &(0x7f0000000080)) 00:29:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f460000000000000000100000000000000000000000000004003800000000000000000000"], 0x25) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:29:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:29:13 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0x0) 00:29:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x402c542d, &(0x7f0000000080)) [ 398.534461] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 398.534461] program syz-executor.0 not setting count and/or reply_len properly 00:29:13 executing program 3: socketpair(0x1, 0x1, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, &(0x7f0000000080)) 00:29:13 executing program 5: openat(0xffffffffffffffff, &(0x7f0000000080)='/', 0x480020, 0x8) mkdir(0x0, 0x0) 00:29:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000140)=""/246) read(r4, 0x0, 0x0) 00:29:13 executing program 2: r0 = socket$unix(0x1, 0x2000000000000001, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) listen(r1, 0x0) r2 = accept4$inet6(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000180)={0x10000000}) utimensat(0xffffffffffffffff, &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100)={{r3, r4/1000+10000}, {0x77359400}}, 0x100) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000240)=""/182) setsockopt$inet6_tcp_int(r2, 0x6, 0x9, &(0x7f0000000140)=0xab, 0x4) 00:29:13 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x10002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0xfffffe6a) sendto(r0, 0x0, 0xfff5, 0x4004840, 0x0, 0xfffffffffffffccf) ioctl$VT_RELDISP(r0, 0x5605) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xfffffffffffffffe) 00:29:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f460000000000000000100000000000000000000000000004003800000000000000000000"], 0x25) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:29:14 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000080)) 00:29:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000008000000006, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000000c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000003d00)={0x0, 0x0, 0x0}, 0x0) [ 399.157031] sg_write: data in/out 2519/1947 bytes for SCSI command 0x80-- guessing data in; [ 399.157031] program syz-executor.0 not setting count and/or reply_len properly 00:29:14 executing program 4: socketpair$unix(0x1, 0x10000000003, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x20) r1 = socket$kcm(0xa, 0x122000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000200)=[{&(0x7f00000001c0)="035db86376863a61", 0x8}], 0x1}, 0x0) 00:29:14 executing program 2: r0 = socket$kcm(0x11, 0x3, 0x0) recvmsg$kcm(r0, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x40) 00:29:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000fed85a1bf38aaf1b4ba88686b1d7eefe93e87bcbcded9d0d73f957a0dc0000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f460000000000000000100000000000000000000000000004003800000000000000000000"], 0x25) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffb, 0x9, 0x100000000, 0x0, 0x0, 0x3, 0x3e, 0x7, 0x8d, 0x38, 0x326, 0x80, 0x9, 0x20, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6}, [{0x60000000, 0x1, 0x5, 0x3, 0x3, 0x6, 0x6, 0x7fffffff}], "ed2eb87a7db412d77dc75ab4168cd0c0823c6ebf5005e7d33f3c61bac50b59fcc34ca0cb4c6ad7ac72e5343261acba156365a1ef561af8475069a5074b4b2e35d461859fa5db712b938591a17fae3054b19ea233ad4222e37a30a70e58cb93dbd1b0919e4d5e290c524953d6d703a67943dbb64ed13301", [[], [], [], [], [], [], []]}, 0x7cf) 00:29:14 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0x4000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="39000000140081ae00003c9733f5f087110008abca9b4e7d0f6298db85d0b0e62bdbb7d553b4e921556b3d5df500c250825702000000000000", 0x39}], 0x1}, 0x0) [ 399.467564] ================================================================== [ 399.475028] BUG: KMSAN: uninit-value in gue6_err+0x646/0x1130 [ 399.480941] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.0.0+ #17 [ 399.487363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.496727] Call Trace: [ 399.499347] dump_stack+0x173/0x1d0 [ 399.503009] kmsan_report+0x131/0x2a0 [ 399.506861] __msan_warning+0x7a/0xf0 [ 399.510699] gue6_err+0x646/0x1130 [ 399.514310] ? fou6_build_header+0x640/0x640 [ 399.518751] __udp6_lib_err+0x18d0/0x2590 [ 399.523018] udpv6_err+0x118/0x130 [ 399.526602] icmpv6_notify+0x462/0x9f0 [ 399.530520] ? udpv6_rcv+0x70/0x70 [ 399.534095] icmpv6_rcv+0x18ac/0x3fa0 [ 399.537929] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 399.543208] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 399.548610] ? csum_partial+0x423/0x4c0 [ 399.552632] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 399.557865] ? icmpv6_sk_exit+0x2c0/0x2c0 [ 399.562038] ip6_protocol_deliver_rcu+0xb5a/0x23a0 [ 399.566997] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 399.572277] ip6_input+0x2b6/0x350 [ 399.575855] ? ip6_input+0x350/0x350 [ 399.579594] ? ip6_protocol_deliver_rcu+0x23a0/0x23a0 [ 399.584814] ip6_rcv_finish+0x4de/0x6d0 [ 399.588823] ipv6_rcv+0x34b/0x3f0 [ 399.592319] ? local_bh_enable+0x40/0x40 [ 399.596411] process_backlog+0x756/0x10e0 [ 399.600611] ? ip6_rcv_finish+0x6d0/0x6d0 [ 399.604800] ? rps_trigger_softirq+0x2e0/0x2e0 [ 399.609401] net_rx_action+0x78b/0x1a60 [ 399.613425] ? net_tx_action+0xca0/0xca0 [ 399.617511] __do_softirq+0x53f/0x93a [ 399.621349] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 399.626655] ? ksoftirqd_should_run+0x30/0x30 [ 399.631171] run_ksoftirqd+0x26/0x50 [ 399.634906] smpboot_thread_fn+0x4d0/0x9f0 [ 399.639182] kthread+0x4a1/0x4e0 [ 399.642574] ? cpu_report_death+0x190/0x190 [ 399.646916] ? schedule_tail+0x1b2/0x410 [ 399.651004] ? kthread_blkcg+0xf0/0xf0 [ 399.654923] ret_from_fork+0x35/0x40 [ 399.658680] [ 399.660309] Uninit was created at: [ 399.663865] kmsan_internal_poison_shadow+0x92/0x150 [ 399.668990] kmsan_kmalloc+0xa6/0x130 [ 399.672820] kmsan_slab_alloc+0xe/0x10 [ 399.676730] __kmalloc_node_track_caller+0xe9e/0xff0 [ 399.681850] __alloc_skb+0x309/0xa20 [ 399.685589] alloc_skb_with_frags+0x186/0xa60 [ 399.690108] sock_alloc_send_pskb+0xafd/0x10a0 [ 399.694718] sock_alloc_send_skb+0xca/0xe0 [ 399.698980] __ip6_append_data+0x42ed/0x5dc0 [ 399.703409] ip6_append_data+0x3c2/0x650 [ 399.707494] icmp6_send+0x2dc7/0x3c30 [ 399.711310] icmpv6_send+0xe5/0x110 [ 399.714957] ip6_link_failure+0x5c/0x2c0 [ 399.719025] vti6_tnl_xmit+0x1354/0x27c0 [ 399.723101] dev_hard_start_xmit+0x604/0xc40 [ 399.727522] __dev_queue_xmit+0x2e48/0x3b80 [ 399.731858] dev_queue_xmit+0x4b/0x60 [ 399.735688] neigh_direct_output+0x42/0x50 [ 399.739943] ip6_finish_output2+0x1d4e/0x25f0 [ 399.744458] ip6_finish_output+0xae4/0xbc0 [ 399.748713] ip6_output+0x5ca/0x710 [ 399.752359] ip6_local_out+0x164/0x1d0 [ 399.756355] ip6_push_pending_frames+0x215/0x4f0 [ 399.761128] rawv6_sendmsg+0x3f29/0x58a0 [ 399.765218] inet_sendmsg+0x54a/0x720 [ 399.769038] ___sys_sendmsg+0xdb9/0x11b0 [ 399.773111] __se_sys_sendmsg+0x305/0x460 [ 399.777282] __x64_sys_sendmsg+0x4a/0x70 [ 399.781376] do_syscall_64+0xbc/0xf0 [ 399.785111] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 399.790318] ================================================================== [ 399.797677] Disabling lock debugging due to kernel taint [ 399.803132] Kernel panic - not syncing: panic_on_warn set ... [ 399.809037] CPU: 1 PID: 16 Comm: ksoftirqd/1 Tainted: G B 5.0.0+ #17 [ 399.816847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.826216] Call Trace: [ 399.828849] dump_stack+0x173/0x1d0 [ 399.832515] panic+0x3d1/0xb01 [ 399.835788] kmsan_report+0x29a/0x2a0 [ 399.839625] __msan_warning+0x7a/0xf0 [ 399.843465] gue6_err+0x646/0x1130 [ 399.847063] ? fou6_build_header+0x640/0x640 [ 399.851497] __udp6_lib_err+0x18d0/0x2590 [ 399.855858] udpv6_err+0x118/0x130 [ 399.859444] icmpv6_notify+0x462/0x9f0 [ 399.863370] ? udpv6_rcv+0x70/0x70 00:29:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl(r0, 0xffffbfffffffffc6, &(0x7f0000000000)) [ 399.866939] icmpv6_rcv+0x18ac/0x3fa0 [ 399.870768] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 399.876007] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 399.881387] ? csum_partial+0x423/0x4c0 [ 399.885386] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 399.890614] ? icmpv6_sk_exit+0x2c0/0x2c0 [ 399.894789] ip6_protocol_deliver_rcu+0xb5a/0x23a0 [ 399.899764] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 399.905075] ip6_input+0x2b6/0x350 [ 399.908657] ? ip6_input+0x350/0x350 [ 399.912400] ? ip6_protocol_deliver_rcu+0x23a0/0x23a0 [ 399.917621] ip6_rcv_finish+0x4de/0x6d0 [ 399.921652] ipv6_rcv+0x34b/0x3f0 [ 399.925145] ? local_bh_enable+0x40/0x40 [ 399.929237] process_backlog+0x756/0x10e0 [ 399.933446] ? ip6_rcv_finish+0x6d0/0x6d0 [ 399.937628] ? rps_trigger_softirq+0x2e0/0x2e0 [ 399.942259] net_rx_action+0x78b/0x1a60 [ 399.946286] ? net_tx_action+0xca0/0xca0 [ 399.950371] __do_softirq+0x53f/0x93a [ 399.954206] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 399.959428] ? ksoftirqd_should_run+0x30/0x30 [ 399.963951] run_ksoftirqd+0x26/0x50 00:29:15 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000080)) [ 399.967691] smpboot_thread_fn+0x4d0/0x9f0 [ 399.971971] kthread+0x4a1/0x4e0 [ 399.975365] ? cpu_report_death+0x190/0x190 [ 399.979728] ? schedule_tail+0x1b2/0x410 [ 399.983816] ? kthread_blkcg+0xf0/0xf0 [ 399.987737] ret_from_fork+0x35/0x40 [ 399.992272] Kernel Offset: disabled [ 399.995905] Rebooting in 86400 seconds..