t$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x501800, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x3, @ipv4={[], [], @local}, 0xf77}, 0x1c) write$P9_RLINK(r1, &(0x7f0000000080)={0x7, 0x47, 0x1}, 0x7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) 17:15:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66652485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1935.152902] sd 0:0:1:0: [sg0] tag#7657 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1935.155021] sd 0:0:1:0: [sg0] tag#7510 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1935.162051] sd 0:0:1:0: [sg0] tag#7657 CDB: opcode=0xe5 (vendor) [ 1935.170824] sd 0:0:1:0: [sg0] tag#7510 CDB: opcode=0xe5 (vendor) [ 1935.176959] sd 0:0:1:0: [sg0] tag#7657 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1935.183141] sd 0:0:1:0: [sg0] tag#7510 CDB[00]: e5 bb b6 66 52 48 5f e8 40 19 c8 ea f7 20 f5 c0 17:15:22 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f00000000c0)=0x91b3) [ 1935.192061] sd 0:0:1:0: [sg0] tag#7657 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1935.201070] sd 0:0:1:0: [sg0] tag#7510 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1935.209989] sd 0:0:1:0: [sg0] tag#7657 CDB[20]: a0 [ 1935.219041] sd 0:0:1:0: [sg0] tag#7510 CDB[20]: a0 17:15:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 17:15:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66653485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_tcp_int(r1, 0x6, 0x3e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r3, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f0000000380)="0adc1f123c123f4d9bd070") syz_execute_func(&(0x7f00000001c0)="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") r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0xa8, r2, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9b}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}]}, @TIPC_NLA_NET={0x4c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffffffffff37}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xcbc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3c}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xef64}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8881}, 0x20000000) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x4, 0xd75, 0x922f, 0x47, 0x1, 0xff}) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f00000003c0)) 17:15:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) [ 1935.433318] sd 0:0:1:0: [sg0] tag#7528 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1935.442370] sd 0:0:1:0: [sg0] tag#7528 CDB: opcode=0xe5 (vendor) [ 1935.448574] sd 0:0:1:0: [sg0] tag#7528 CDB[00]: e5 bb b6 66 53 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1935.457560] sd 0:0:1:0: [sg0] tag#7528 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1935.466531] sd 0:0:1:0: [sg0] tag#7528 CDB[20]: a0 17:15:22 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x438000, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f00000000c0)={0x8}) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) write(r1, &(0x7f0000000000)="6870e78a77833ac30bd0924e7b3784738228148fced242b3c0623d28d8fa47aab13415df22161561a043cda50c4bdc05bffe42eb99829fc48151c5d081", 0x3d) 17:15:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66654485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x4, 0x4) 17:15:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 17:15:22 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000100)=0x3, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x10000, 0x4800) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x10001, 0xff, 0x8, 0x7}) 17:15:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x1267, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1935.688457] sd 0:0:1:0: [sg0] tag#7528 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1935.697601] sd 0:0:1:0: [sg0] tag#7528 CDB: opcode=0xe5 (vendor) [ 1935.703881] sd 0:0:1:0: [sg0] tag#7528 CDB[00]: e5 bb b6 66 54 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1935.714318] sd 0:0:1:0: [sg0] tag#7528 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1935.723312] sd 0:0:1:0: [sg0] tag#7528 CDB[20]: a0 17:15:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040), 0x4) 17:15:22 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = add_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000300)={'syz', 0x1}, 0x0, 0xffffffffffffffa5, 0xfffffffffffffffc) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="c14fc0b83826d141f521a1a7abb5111e2eb92cc3211eafa9afd0ab176ee428e2ea6809b43cd482b6958d533ab63ad353e11812363a64f805a7d4e6ef810b86b74c1da263d7dfb80cd62f958c12ed83471aa585260c61216d786bf374af16c47828317a161315bd1b526e12d22121d3a69be1ce5d43250551792a2a64f21efe1f77ba9248a38270623227dbc25d0a2b2bfdf57838b3b44d093888dd50", 0x9c, r1) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x200000, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x3000, 0x1}) 17:15:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) 17:15:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66655485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1936.015424] sd 0:0:1:0: [sg0] tag#7528 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1936.024482] sd 0:0:1:0: [sg0] tag#7528 CDB: opcode=0xe5 (vendor) [ 1936.030796] sd 0:0:1:0: [sg0] tag#7528 CDB[00]: e5 bb b6 66 55 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1936.039693] sd 0:0:1:0: [sg0] tag#7528 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1936.048671] sd 0:0:1:0: [sg0] tag#7528 CDB[20]: a0 17:15:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000200)={0x8, &(0x7f00000001c0)=[0x2, 0xffffffffffffffff, 0x100, 0x3f, 0x7, 0x1f, 0x5, 0x5]}) syz_execute_func(&(0x7f0000000080)="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") syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x2, 0x143401) 17:15:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x1274, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x1000000000722, 0x101000) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x20000, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) 17:15:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}) 17:15:23 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x380001, @ipv4}, 0x1c) 17:15:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66656485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}) 17:15:23 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x20000, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f0000000240), 0x10) pselect6(0x40, &(0x7f0000000000)={0xffffffffffff7bf3, 0xc87, 0x200, 0x9, 0xd0a, 0x90, 0x8, 0x3f}, &(0x7f0000000080)={0x2, 0x4, 0x7, 0x80, 0xffffffff00000000, 0x7, 0x8, 0x2}, &(0x7f00000000c0)={0xffffffff, 0x81, 0x81, 0x7ff, 0x3f2, 0x8000, 0x8, 0x3}, &(0x7f0000000140)={r1, r2+30000000}, &(0x7f00000001c0)={&(0x7f0000000180)={0x5}, 0x8}) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0xfd) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) [ 1936.523926] sd 0:0:1:0: [sg0] tag#7528 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1936.533149] sd 0:0:1:0: [sg0] tag#7528 CDB: opcode=0xe5 (vendor) [ 1936.539372] sd 0:0:1:0: [sg0] tag#7528 CDB[00]: e5 bb b6 66 56 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1936.548367] sd 0:0:1:0: [sg0] tag#7528 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1936.557315] sd 0:0:1:0: [sg0] tag#7528 CDB[20]: a0 17:15:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x1275, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:23 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x101000, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt(r0, 0x2, 0x1, &(0x7f0000000380)="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", 0x1000) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000080)) ioctl$SG_IO(r2, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000000c0)={'eql\x00', 0xfc3f}) r3 = accept4$ax25(r0, &(0x7f0000000100)={{0x3, @default}, [@rose, @bcast, @bcast, @netrom, @netrom, @rose, @default, @null]}, &(0x7f0000000180)=0x48, 0x80000) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000002c0)=0x1000) sendto$ax25(r3, &(0x7f00000001c0)="bc46015ec2ba543a2ccb105b66eb5d04f08f58d0", 0x14, 0x40, &(0x7f0000000240)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 17:15:23 executing program 1: stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000100)=[0xee00, 0xee01, 0xee00, 0xffffffffffffffff]) setregid(r0, r1) r2 = socket$inet6(0xa, 0x6, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x8001, 0x0) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000180)=0x3) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x4, @ipv4, 0x10000000000000}, 0x985772de) 17:15:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x1276, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="0adc1f123c003f319bd070") syz_execute_func(&(0x7f0000000080)="984a2ae92c7e964c0f05bf04004000c4a37bf0c50341e2e9c421e5741c14c4e3f963f0360f383a9e020000000f0d2046205032d2e5d24b264b2638091e8f897c80443f004583eab1d19a0080000031f3bf7ec4e10bfa0bfa0f3a412935f2f045f61964f000030f42d2c461755575cec4a2adb96d42262e2e66450f7d64c60865f2ad4865f20f7cd8efa1a12ad764d38f53efc4211de34f006766f2ab440fec3f66f3adc4c162b1f72e2ec489309271d8d8000000000fc4634148f70000c2c461ab59642dcbc481cb5ac736b2aa66450fc4650000d3da43a171dd4ecdcda2660f38346800c4e3295d36d8e5c422b5abf37d75c4426507af0f000000a2a25fd25cf3460f2aabee320f7ba5a9a50000ff2ef2af79ca553131fb260f9159073b62") openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x8000, 0x0) 17:15:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 17:15:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x5, @rand_addr="280a3407e5b09602f07c08e483b7154e", 0x6a8d}, r2}}, 0x30) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xb) r4 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) ioctl$SG_IO(r4, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2201, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:24 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x602100, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) 17:15:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66657485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x1, 0x8, 0x7f}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={r3, 0x8}, 0x8) [ 1937.487514] sd 0:0:1:0: [sg0] tag#7559 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1937.496532] sd 0:0:1:0: [sg0] tag#7559 CDB: opcode=0xe5 (vendor) [ 1937.502827] sd 0:0:1:0: [sg0] tag#7559 CDB[00]: e5 bb b6 66 57 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1937.511808] sd 0:0:1:0: [sg0] tag#7559 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1937.520783] sd 0:0:1:0: [sg0] tag#7559 CDB[20]: a0 17:15:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2202, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:24 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x88001011}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, r2, 0x120, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffff000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xec77}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x48000}, 0x8090) 17:15:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 17:15:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66658485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000080)="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") r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x1, 0x0) recvfrom$x25(r1, &(0x7f00000001c0)=""/181, 0xb5, 0x2000, 0x0, 0x0) 17:15:25 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x3, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x24080, 0x0) sendto$inet(r1, &(0x7f0000000080)="254dd0ca1ffa7008d8e5199fa5f2271bc4b775cf4ac31262025ceaccc9cd1242e175cb041dbed45a93e849c8a628ca0f8c91ef9f715567d38363c2da2a72c6ad43589e47cafecb0ce38e8445a96e4df227c98d078399f9a76f642754d744743340113bacae162417e47673af5cff1668ea5c1654a4dd310f806574bc47ef58ce2f2d77249c9a4ee7dc07b4c186bcbced1d8545d99a53bb9c82abe032eb998ba5614e607f6a53e8a783e3e5fe6977b6c64cd2", 0xb2, 0x4, &(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10) 17:15:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000002c0)=0xfffffffffffffffa, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000380)={0x4ee}) r3 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x7, 0x288100) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x8, 0xa2, 0x800, 0x2f, 0xfffffffffffffff7, 0x4, 0x7, {0x0, @in6={{0xa, 0x4e23, 0x7, @mcast2, 0x4}}, 0x80, 0x0, 0x100000001, 0x1, 0x20}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYBLOB="620000008ed0f4aa1e8a26feb9e1814e324b93acf58608f7ce1f8de4c7347c12b80821ceedeb0eca19067cdb1ee505141311437d21db08e2f032ca96d5a354b277dd77d7bef5158dfc8d9117c8aa07e4ee9425065e8d6d35bc8fc1c448230b08111e49c491bd"], &(0x7f0000000240)=0x6a) 17:15:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}) 17:15:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66659485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2205, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000080)=0x2, 0x4) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r3, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f00000000c0)=0x4ba0000000) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x10000, 0x0) 17:15:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 17:15:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2270, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb6665a485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:25 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x380000, @ipv4}, 0x1c) 17:15:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x5, &(0x7f0000000100)="0adc1f0cd1fb5cf90000000000004529123f319bd070ffb9b813552f6a2a962f971db309d4c36c638b5333210f87545e9d017947cfb8d417f680a1264decd016ba2473e147bad83ffcdad53ba739bee27f4b2471cfc6c494275872d9f5588dd217a7843405cd74861fb2071cba3407075a55a9b2f0eeb95d13d1a8e445cd3a38124d61081b32873795cd6c378354561d035b2e79151c31b24ad1a254") r1 = openat$cgroup_ro(r0, &(0x7f0000000500)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000540)={0x5d, ""/93}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f00000005c0)=0x2563) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r2) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0x5b, "0dbe00001c86e78df60af1ff1e0bdc18131cc962f544ab48198678be5bf0706160869ff3db44e5b071de5716227666e2004cb5d137749bbf8686f22928677db4ae9cf094b9ebf53a206ecc9022c796eb15ba4ce34226d59eff21e3"}, &(0x7f00000001c0)=0x3eb) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000002c0)={r3, 0x6}, 0x8) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000640)=0x7e) r4 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000000)=0x39) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000440)={0x3, 0x5, 0x5, 0x8, &(0x7f0000000300)=[{}, {}, {}, {}, {}]}) ioctl$SG_IO(r4, 0x2275, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffe5f, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x80001, 0x0) 17:15:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000080)="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") 17:15:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb6665b485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2271, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}) 17:15:26 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000080)) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f00000000c0)={0x5, 0x0, 0x1, 0x3, 'syz0\x00'}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000100)=0xabc, 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x234, r2, 0x422, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xb4, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}}}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffbff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa2e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x617}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_BEARER={0xa0, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x9, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @local, 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 17:15:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000600)='/dev/sg#\x00', 0xfffffffffffffffd, 0x80) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x1, 0x0) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f00000002c0)={0x10000, 0xfffffffffffffffe, 0xff, 0x7, 0x9}) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0xffffffffffffffb8, 0x0, @scatter={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/106}, {&(0x7f0000000380)=""/253}, {&(0x7f0000000480)=""/225}, {&(0x7f0000000140)=""/99}, {&(0x7f0000000240)=""/74}]}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x8200, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000080)=0x800, 0x8) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x20) [ 1939.436831] scsi_io_completion_action: 3 callbacks suppressed [ 1939.436865] sd 0:0:1:0: [sg0] tag#7773 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1939.451863] sd 0:0:1:0: [sg0] tag#7773 CDB: opcode=0xe5 (vendor) [ 1939.458251] sd 0:0:1:0: [sg0] tag#7773 CDB[00]: e5 bb b6 66 5b 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1939.467323] sd 0:0:1:0: [sg0] tag#7773 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1939.476325] sd 0:0:1:0: [sg0] tag#7773 CDB[20]: a0 17:15:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2272, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}) 17:15:26 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x80, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000080)={0x1, 0x1, 0x2}) r1 = socket$inet6(0xa, 0x4, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x0, 0x40, 0x35}) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) 17:15:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a050000b360000000000058ba4a960c404a8c70e489d9af030f070ced5971c31d55adbe8d29be9903cba83f2083acaaeff6422cb17c90d491ace3567d9b740d7a73") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}) 17:15:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}) [ 1939.726671] sd 0:0:1:0: [sg0] tag#7782 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1939.735625] sd 0:0:1:0: [sg0] tag#7782 CDB: opcode=0xe5 (vendor) [ 1939.741903] sd 0:0:1:0: [sg0] tag#7782 CDB[00]: e5 bb b6 66 5b 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1939.750881] sd 0:0:1:0: [sg0] tag#7782 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1939.759779] sd 0:0:1:0: [sg0] tag#7782 CDB[20]: a0 17:15:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000240)="39e1d7e4e308926b39200e3f6faddaadb2f84b35df1a3f136320a0e1f61d") syz_execute_func(&(0x7f0000000080)="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") 17:15:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x2, 0xffffffffffffffff) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x0}) 17:15:27 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) readlinkat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/120, 0x78) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) 17:15:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2276, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb6665c485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}) [ 1940.369010] sd 0:0:1:0: [sg0] tag#7781 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1940.377956] sd 0:0:1:0: [sg0] tag#7781 CDB: opcode=0xe5 (vendor) [ 1940.384213] sd 0:0:1:0: [sg0] tag#7781 CDB[00]: e5 bb b6 66 5c 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1940.393424] sd 0:0:1:0: [sg0] tag#7781 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1940.402549] sd 0:0:1:0: [sg0] tag#7781 CDB[20]: a0 17:15:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2279, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x40040, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000080)=0x7, 0x4) 17:15:27 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x244300, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ubi_ctrl\x00', 0x80000, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000240)='vents\x02\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x8, 0x109200) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000080)=""/164) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f0000000180)=0x1e) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) 17:15:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) 17:15:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x227a, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x80000000, 0x200) ioctl$KDDELIO(r2, 0x4b35, 0x200) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb6665d485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 17:15:28 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000080)={0x4, 0x0, {0x3, 0x2, 0x3, 0x3, 0x2b57651a}}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f00000003c0)=0xe8) syz_mount_image$f2fs(&(0x7f0000000100)='f2fs\x00', &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="cbd30c8be51d06a391317cd1847b894d7081011544ef34795bd5f0449b8ecb1caf183e7be26016ffee7c4d8af9acbf624dacd31fbeb06d4a828c010d0ed550a9d6959d7df4d72e9c33e3e4dcadd0acc2b74f77b0fc7f6974b01617ea577eb5dd37620682b980bcf78832a41faaf0b0f072528ac2278185e97ddabae6b710e8baea9d2dc39ae4c26fcc41bbf43c2335ed84353303d53c114ed034bea857bfd06f54cca4b2e9675d3db67e57e2dd0f6d1dce245acfef0df341c228f8676a88ef1674eb94778676597fc65a27299e926826d331387bc6651a83c7fbcadb6892788fe9b89dcfe45a6c133a22d3e75fae1ff769df1e32aa44c8b240", 0xf9, 0x9}], 0x2000, &(0x7f0000000400)={[{@prjquota={'prjquota', 0x3d, '/dev/vfio/vfio\x00'}}], [{@fowner_eq={'fowner', 0x3d, r2}}, {@obj_role={'obj_role', 0x3d, 'vmnet0'}}]}) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) openat$vcs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vcs\x00', 0x0, 0x0) 17:15:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000580)="984a2ae92c7e964c0f05bf04004000c4a37bf0c50341e2e9c421e5741c14c4e3f963f0360f383a9e020000000f0d2046205032d2e5d24b264b2638091e8f897c80443f004583eab1d19a0080000031f3bf7ec4e10bfa0bfa0f3a412935f000030f42d2c461755575cec4a2adb96d42262e2e66450f7d64c60865f2ad4865f20f7cd8efa1a12ad764d38f53efc4211de34f006766f2ab440fec3f66f3adc4c162b1f72e2ec489309271d8d8000000000fd3634148f7003a3ac2c461ab59642dcbc481cb5ac736b2aa66450fc4650000d3da43a171dd4ecdcda2660f38346800c463295d36d8e5c422b5abf37d75c4426507af0f000000a2a25fd25cf3460f2aabee320f7ba5a9a50000ff2ef2af79ca553131fb260f91590767d9e8") openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) 17:15:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x227b, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x227c, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:28 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f00000005c0)=0x1, 0xff52) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) [ 1941.310902] sd 0:0:1:0: [sg0] tag#7781 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1941.319862] sd 0:0:1:0: [sg0] tag#7781 CDB: opcode=0xe5 (vendor) [ 1941.326198] sd 0:0:1:0: [sg0] tag#7781 CDB[00]: e5 bb b6 66 5d 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1941.335173] sd 0:0:1:0: [sg0] tag#7781 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1941.344142] sd 0:0:1:0: [sg0] tag#7781 CDB[20]: a0 17:15:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 17:15:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) geteuid() 17:15:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x227d, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:28 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @rand_addr="02736975cbb247280a74d1e8b0da3281"}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) 17:15:28 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='io.stat\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x3, 0x30}, &(0x7f00000003c0)=0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000400)=@sack_info={r4, 0xc7, 0x6}, &(0x7f0000000440)=0xc) ioctl$SG_IO(r2, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket(0x9, 0x3, 0x7fffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x3, @loopback, 0x5f98}}, [0x0, 0x1, 0x79, 0xffffffff, 0x1, 0x73c, 0x9, 0x3ff, 0xffff, 0x2, 0x9, 0xff, 0x8bd, 0x101, 0x4ae]}, &(0x7f0000000240)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000280)={r6, 0x26}, 0x8) 17:15:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 17:15:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb6665e485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0xffffffffffff07a0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x81, 0x4) [ 1941.789963] sd 0:0:1:0: [sg0] tag#7837 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1941.798923] sd 0:0:1:0: [sg0] tag#7837 CDB: opcode=0xe5 (vendor) [ 1941.805376] sd 0:0:1:0: [sg0] tag#7837 CDB[00]: e5 bb b6 66 5e 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1941.814325] sd 0:0:1:0: [sg0] tag#7837 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1941.824277] sd 0:0:1:0: [sg0] tag#7837 CDB[20]: a0 17:15:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x19, 0x80001, 0x1, &(0x7f00000001c0)) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000080)="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") 17:15:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) ioctl(r2, 0x9, &(0x7f0000000080)="78f55b5c8631af72bc8bb3a4ee8554a1fae7a937ce68f2cbe191b78f7bcf71a9a585005f033e5e25d1592735ceb999d75fef80becbb15e1ecf82cfb1238df0eafc4237968dd738d3be35e16867ca30d099ead1e20160ae9de3513400c535bb1f9c716040cc66d07a3355bed6bb2eac8733f0e1f470fc51d24d780ebf0fcf33e5e49da6c5836fc500a14263a91a90a0647c5ec99cea4dd708391ec49d5e610826b39d64b546c027478538c22f72dae1292c725d1ee995bd13e6c59fa1488d461d63ca899f37") connect$rxrpc(r2, &(0x7f0000000040)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0x7, @rand_addr="a6e73b82fb26b1e2fab2989be8ac047a", 0x4}}, 0x24) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x227e, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:29 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000080)={0x7b, 0x0, [0x1, 0x1, 0x5, 0x2]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) mq_timedsend(r1, &(0x7f0000000100)="c3cafb7fdca93491322867a26a6d7b37ac8ef232d52ee13acc40902b160b21e7ed19b79c85f4d4cb2aef841cc8606fd4aedc3318b0e895265c6e1dadbf52fd8758a0ca701681f85d7691fb72ded7a417f7d160ed2c991cf7a3a4dd2bea32016ec79a207d1276ed7ea435cfe8ee5eaf4c5e94be47e2bd15827a1943482947cd8f188e092d29892074c064fd652c2e346c386953dd6bd535af63d109033d1f438a3d09e0ddef00cb87baece2be2f23e5", 0xaf, 0x3, &(0x7f0000000200)={r2, r3+10000000}) 17:15:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 17:15:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb6665f485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:29 executing program 1: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x101c00, 0x18) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080)=0x10, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000)=0x2fbd, 0x4) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000200)={r2, 0x4}, 0x8) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000240)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000280)=r3) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000140)={0x431}) [ 1942.291275] sd 0:0:1:0: [sg0] tag#7837 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1942.300223] sd 0:0:1:0: [sg0] tag#7837 CDB: opcode=0xe5 (vendor) [ 1942.306674] sd 0:0:1:0: [sg0] tag#7837 CDB[00]: e5 bb b6 66 5f 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1942.315680] sd 0:0:1:0: [sg0] tag#7837 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1942.324676] sd 0:0:1:0: [sg0] tag#7837 CDB[20]: a0 17:15:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x227f, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:29 executing program 2: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x2, 0x5, 0xffffffff, 0x40, 0xffffffffffffff80, 0x100, 0x9, 0x1, 0x7e, 0x1, 0x9}, 0xb) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x6, &(0x7f0000000380)="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") r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x200, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000140)={r1, 0x4, 0x80000000, "10ed54fdc5d747d1c713545184508e4c60cbcd32dbd9a65ad39aaffff36392459179a66a1f29871ff9e7701bb330dca4e700c00c332af8a9da776a55c80caf956c8cfc55443d0ed856a5598a27d3c37d4521f023ce6e1a8466d15efff9b71c19380b9ce7d887b607a9602d6093b378b31544cb48b1c7696465ef641168"}) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f0000000500)=""/4096, &(0x7f0000000000)=0x1000) ioctl$SG_IO(r3, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xfffffffffffffc14, 0x4, 0x9, 0x0}) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000040)=""/72, &(0x7f00000000c0)=0x48) connect$rxrpc(r2, &(0x7f00000002c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0xffffffffffffffce, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}}, 0x24) 17:15:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 17:15:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66660485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2282, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1942.559070] sd 0:0:1:0: [sg0] tag#7875 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1942.568038] sd 0:0:1:0: [sg0] tag#7875 CDB: opcode=0xe5 (vendor) [ 1942.574542] sd 0:0:1:0: [sg0] tag#7875 CDB[00]: e5 bb b6 66 60 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1942.583532] sd 0:0:1:0: [sg0] tag#7875 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1942.592490] sd 0:0:1:0: [sg0] tag#7875 CDB[20]: a0 17:15:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) syz_execute_func(&(0x7f0000000080)="984a2ae92c7e964c0f05bf04004000c4a37bf0c50341e2e9c421e5741c14c4e3f963f0360f383a9e020000000f0d2046205032d2e5d24b264b2638091e8f897c80443f004583eab1d19a0080000031f3bf7ec4e10bfa0bfa0f3a412935f2f045f61964f000030f42d2c461755575cec4a2adb96d42262e2e66450f7d64c60865f2ad4865f20f7cd8efa1a12ad764d38f53efc4211de34f006766f2ab440fec3f66f3adc4c162b1f72e2ec489309271d8d8000000000fc4634148f70000c2c461ab59642dcbc481cb5ac736b2aa66450fc4650000d3da43a171dd4ecdcda2660f38346800c4e3295d36d8e5c422b5abf37d75c4426507af0f000000a2a25fd25cf3460f2aabee320f7ba5a9a50000ff2ef2af79ca553131fb260f9159073b62") 17:15:30 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @loopback}, 0x1c) setsockopt$inet6_dccp_int(r0, 0x21, 0xf, &(0x7f0000000000)=0x1, 0x4) 17:15:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}) 17:15:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x511800, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2283, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66663485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = accept(r0, &(0x7f0000000040)=@x25, &(0x7f00000000c0)=0x80) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000100)={0x0, 0xa047, 0x10, 0x1, 0x2}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000180)={r2, 0x8, 0x30, 0x5, 0xfffffffffffffffa}, &(0x7f00000001c0)=0x18) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r3, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1943.259921] sd 0:0:1:0: [sg0] tag#7781 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1943.268867] sd 0:0:1:0: [sg0] tag#7781 CDB: opcode=0xe5 (vendor) [ 1943.275170] sd 0:0:1:0: [sg0] tag#7781 CDB[00]: e5 bb b6 66 63 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1943.284144] sd 0:0:1:0: [sg0] tag#7781 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1943.293257] sd 0:0:1:0: [sg0] tag#7781 CDB[20]: a0 17:15:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}) 17:15:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661095fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:30 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r2, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40880}, 0x800) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x2) 17:15:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x2, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x105040, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000040)) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1943.554874] sd 0:0:1:0: [sg0] tag#7781 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1943.563812] sd 0:0:1:0: [sg0] tag#7781 CDB: opcode=0xe5 (vendor) [ 1943.570018] sd 0:0:1:0: [sg0] tag#7781 CDB[00]: e5 bb b6 66 61 09 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1943.579174] sd 0:0:1:0: [sg0] tag#7781 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1943.588506] sd 0:0:1:0: [sg0] tag#7781 CDB[20]: a0 17:15:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 17:15:31 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x380000, @ipv4}, 0xffffffffffffffe3) 17:15:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = semget(0x1, 0x7, 0x200) semctl$SEM_STAT(r2, 0x4000000000002, 0x12, &(0x7f0000000040)=""/35) 17:15:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000080)="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") add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="64bc5b13f889f2fa224b375027e4031f9e6bb04171b4dea78fc1e0547aa618bcdf75ca87b845b28fed082d4d6bf7baf06cf305933433d10569a0d776f77e8b0efa7d4f1f187c76931d6356d12c5783502053e8b19f6f1c37b66294aea0021fcab6c6c812da69be1e639e1069d9180aa068d417cf560cf2c37ecf0cba56dc7c1ed4b051c8cb88f9254bb1", 0x8a, 0xfffffffffffffffa) sync_file_range(r0, 0xffff, 0x7ff, 0x0) add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) 17:15:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661615fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661635fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1944.172971] sd 0:0:1:0: [sg0] tag#7916 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1944.181884] sd 0:0:1:0: [sg0] tag#7916 CDB: opcode=0xe5 (vendor) [ 1944.188089] sd 0:0:1:0: [sg0] tag#7916 CDB[00]: e5 bb b6 66 61 61 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1944.197105] sd 0:0:1:0: [sg0] tag#7916 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1944.206281] sd 0:0:1:0: [sg0] tag#7916 CDB[20]: a0 17:15:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2287, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:31 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x8, @remote}, 0x8c) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="42000000e40000ff010001001876a1b7102b1cdb6de7d094177b51585d9fa83f56f0ba849ef00b0b84887e88cfbc2920e2a5bfac48aeb148b704aaba4524937b6f8dad0abed8f780b5087bf712ef2bd81804ca63aeadf56ae03b6f74d95ffc7d02276631b9a6bed3ab"]}) dup2(r0, r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000000c0)={r0}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @loopback}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000200)={r2, 0xc5, 0x9, 0x80, 0x180000000000000, 0x7ff}, 0x14) 17:15:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = getpgid(0x0) r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x80000001, 0x400000) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000100)={0x0, 0xa7, 0x0, 0x8}, 0x10) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x6, 0x80, 0x7ff, 0x42, 0x0, r1}) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r3, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 17:15:31 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x803ff) mq_notify(r0, &(0x7f0000000200)={0x0, 0x2b, 0x2, @thr={&(0x7f0000000080)="d5c9efcf3f383b3a3e6feb85f83e1fcc72c55794e8db9d72614e97136de9c1247651268cd1ae9aa4bb44a4d0722956ea7efe1d740e7dc5ebd04152d411bc47bbd23823d29b1ee3b6268442c641d7f4d32b9626c4384093575be567671a14ec790a0731f4164d65bf7cb006e6b882e770420c62f97ae07f2a37036e20013653302a491bf0c5c768ba07c8317a3293b5ad0eb29b8939c6b36aa87e114f3b99d1321243fd23f35fe4c265a1e1efd558ecd3452cf0bd6e91d5ddea3933998d2325d2f65f2734cc945b313ce54edfc0c6ba367801be1bd6999abd21cd86a27508cf1a68dcb6f1f0", &(0x7f0000000180)="72c35a7cff1ac40cfa3195a4d5b258140b223454476dc7ced4c20d43a509e3c56c77f2e52586c475ade694ade294870cc262b6040c362c9b6e3a0584f7b9e4e353fedc1877c5bd22e92bb06539f9de785de55629078ececdb56e4c3e19db7e480cc484f069a48b30aa0ee0ba63169deccf2b36c3b45e62df729e0ef4"}}) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000240), 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) 17:15:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661480ae84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2288, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 17:15:31 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$sg(&(0x7f0000000640)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='io.stat\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="180029bd7000fddbdf250300000018000300140006000000ef5bffdaa6ce3d4cffffac1414aa0c000100080009004e0000000800060003000000060009000000200001000c0006006c626c6372000000080004004e22000008000900110000000000060038000500ff00ffff73a045e2b7ec6c516e413ba80a7bccb60df875c5ff7e0330aa3fb3e79d355267c08475bb289c7f3418d21f9652c8321eef41a9ce68d7e8a34d60fdee3f0076b9b9dbb711f3ff02134088a5d379888fdfdd01485b522ae633e475a0d68f310b7dc71420a43590cff84aab5561a72600"/230], 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r3 = fcntl$dupfd(r0, 0x406, r0) sendmsg$alg(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="d7761bee6a124753d6442cc4587526eee740f8458138db1e6f24ca363d9f4224e01455109262c1c4cd923ff5638a7fc006c16d2267b2ff1384255e4f1eefca9aeaae29b1aa0ab48b08b85dafd5f2013dc92cc9082a85eb9872bf60c21b250facb8020996576ccd7ce45505a1ed35d9fd1a32f93b61cc45b14dfcbae4dfece52c9aa0a4a37c2df3b5fd89500ed0a3f8e9f58b18baa1103303259dd42e32e74a7285220e95862cf0a45e0d432517e3f8c7967b89cf4ce0546b966410db988f468092b09ebc3eb81426e9dd63fd501cfd0d472fb407a6ebacc5d929b4204f14aa24b67a884a8b", 0xe5}, {&(0x7f0000000100)="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", 0xfc}, {&(0x7f0000000240)="d5a70dbbc51d53445d129057bbe298c90de92eb7cee2552a33122fb083c7927c95c2e2b58b87d1a4d5a29eaaa905f421c973ca3890c3db25164830d6e6fd925924516a1f71bc4a926d75d0459d5be39e5cb42b5357878ea5cf9c530ff50499ddb3fbf3ffc80da676759c5cf7439bd2c61137ec189e544b7cef20784134f6c4f7ab38f42b09918cb70d6351f2d40abe8301fee26128b2f2672061100760bac68e82a26d83bc4fd13b", 0xa8}, {&(0x7f0000000380)="052ec38b89e22ddca6a820d2aaa11af7defad19b768b3494b74e34503e0326835c05ad277c2ca4161467925036141176da7b", 0x32}, {&(0x7f00000003c0)="cdc8ec23a48ce7ee4aefa088d74ffcb08095c345eadd0b09edff12d2ff99764820744e52676523da554ed6580ce6089ccd737c3ceead67c5c97f2025dee8d23c271a2d54ceb1db1dc1ae9bfefc641cfe13fad3bd4e1bce513786415be9621a1b0ba6d7c788acc0e96d46fd377cd1a957334d058a6e85676f49e7fe1bd1405edf1c12e607906aac49c7035ef115edac4745ca457bcf30825e780f259e96fe0e2623c39dcd1604d023f5c5101e457a2bba55dcf9ea55b934a40a6ea2eae28ddb3dd1701b18b63ce74f1842793da1cb5780d8b645ebce4e89e2a73866a3e1218cfd664e21302a3f387c07f3e4db5b9ea68f3ef2e5b0", 0xf4}], 0x5, &(0x7f0000000540)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18, 0x10}, 0x44804) [ 1944.506107] scsi_io_completion_action: 1 callbacks suppressed [ 1944.506140] sd 0:0:1:0: [sg0] tag#7781 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1944.521181] sd 0:0:1:0: [sg0] tag#7781 CDB: opcode=0xe5 (vendor) [ 1944.527403] sd 0:0:1:0: [sg0] tag#7781 CDB[00]: e5 bb b6 66 61 48 0a e8 40 19 c8 ea f7 20 f5 c0 [ 1944.536384] sd 0:0:1:0: [sg0] tag#7781 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1944.545369] sd 0:0:1:0: [sg0] tag#7781 CDB[20]: a0 17:15:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x6, 0x40000) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x2, 0x4) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) syz_execute_func(&(0x7f0000000580)="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") 17:15:32 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00000005c0)=0x2, 0xfffffffffffffe20) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) 17:15:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) 17:15:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2289, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:32 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb666614861e84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x8003, 0x181200) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xffffffffffffffff, 0x800) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000100)={0x8001, 0x1, 'client0\x00', 0xffffffff80000002, "bea62b7e71b684db", "2d695e18c9c62f079d114a6af00e0e968918f68580a4a4484ad80355dd4d8faa", 0x1, 0x3}) 17:15:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x4b47, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1945.218929] sd 0:0:1:0: [sg0] tag#7927 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1945.227849] sd 0:0:1:0: [sg0] tag#7927 CDB: opcode=0xe5 (vendor) [ 1945.234189] sd 0:0:1:0: [sg0] tag#7927 CDB[00]: e5 bb b6 66 61 48 61 e8 40 19 c8 ea f7 20 f5 c0 [ 1945.243202] sd 0:0:1:0: [sg0] tag#7927 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1945.252193] sd 0:0:1:0: [sg0] tag#7927 CDB[20]: a0 17:15:32 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x380000, @remote}, 0x1c) 17:15:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}) 17:15:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000380)={0xfffffffffffffff8, 0x2, 0x2, 0x9, 0x9, [{0x10001, 0x5, 0x3, 0x0, 0x0, 0x81}, {0x7fffffff, 0x8, 0x8ffb, 0x0, 0x0, 0x4}, {0x8, 0xffffffffffffff81, 0xc3760fa, 0x0, 0x0, 0x102}, {0xc7, 0x80, 0xb4a, 0x0, 0x0, 0x2088}, {0x5, 0xffffffff7fffffff, 0xdd0, 0x0, 0x0, 0x4e50ee46104ab258}, {0x100, 0xcad8, 0x8, 0x0, 0x0, 0x8}, {0x42, 0x8, 0x20, 0x0, 0x0, 0x500}, {0xc0aa, 0x0, 0x23f, 0x0, 0x0, 0x9}, {0x401, 0x7fffffff, 0x27, 0x0, 0x0, 0x6}]}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x40, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) capget(&(0x7f0000000080)={0x20071026, r2}, &(0x7f00000000c0)={0x47db, 0x8, 0x7f, 0x2, 0x5, 0x5fabf936}) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x4b49, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:33 executing program 5: ioctl(0xffffffffffffffff, 0x10000, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000080)="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") r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x2) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x7fffffff) socket$inet_dccp(0x2, 0x6, 0x0) 17:15:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x5382, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}) 17:15:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb666614863e84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:33 executing program 1: ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000200)={0x2, 0xffffffffffffffff}) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000240)={0x0, 0x0}) fcntl$lock(r0, 0x5, &(0x7f0000000280)={0x1, 0x2, 0x6, 0x94eb, r1}) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x3ff, 0x4) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x8000, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x0, 0x70bd2c, 0x25dfdbff, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0xcbbb6e5}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000080)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f00000002c0)={0x6, 0x2, 0x3f, 0x0, '\x00', 0x9}) 17:15:33 executing program 2: r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0xfffffffffffff74d, 0x4000) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000100)={0x76f06e5dc41007a3, @reserved}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000080)=0x57) ioctl$SG_IO(r2, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 17:15:33 executing program 1: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3f, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) [ 1946.164629] sd 0:0:1:0: [sg0] tag#7783 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1946.173631] sd 0:0:1:0: [sg0] tag#7783 CDB: opcode=0xe5 (vendor) [ 1946.179845] sd 0:0:1:0: [sg0] tag#7783 CDB[00]: e5 bb b6 66 61 48 63 e8 40 19 c8 ea f7 20 f5 c0 [ 1946.188946] sd 0:0:1:0: [sg0] tag#7783 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1946.198013] sd 0:0:1:0: [sg0] tag#7783 CDB[20]: a0 17:15:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x5385, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8010}, 0xffffffffffffff56, &(0x7f00000000c0)={&(0x7f00000005c0)={0x278, r2, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x44, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1c32}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x63b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2aba}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}]}, @TIPC_NLA_LINK={0x11c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffff8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_NET={0x50, 0x7, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd4}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9b6d}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x8c0}, 0x3) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x5386, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:33 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000080)={0xffffffff, {{0x2, 0x4e24, @empty}}}, 0x88) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) 17:15:34 executing program 5: r0 = accept$netrom(0xffffffffffffff9c, &(0x7f00000001c0)={{0x3, @default}, [@default, @remote, @rose, @netrom, @bcast, @remote, @null, @netrom]}, &(0x7f0000000040)=0x48) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x60000, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000080)="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") 17:15:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 17:15:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe80519c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:34 executing program 2: r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member\x00', 0x2, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x541b, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:34 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x5e) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="5559aa", 0x3, 0x4, &(0x7f0000000080)={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}, 0x1c) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f00000000c0)={0x3, 0x0, [{0x6, 0x2, 0x0, 0x0, @irqchip={0x6, 0x3}}, {0x10000, 0x7, 0x0, 0x0, @msi={0x3, 0xfffffffffffffc00, 0xffffffffffffff7f}}, {0x8f6a, 0x7, 0x0, 0x0, @adapter={0x8, 0x1, 0x5, 0x401}}]}) 17:15:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}) 17:15:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x5421, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1947.106503] sd 0:0:1:0: [sg0] tag#7927 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1947.115471] sd 0:0:1:0: [sg0] tag#7927 CDB: opcode=0xe5 (vendor) [ 1947.121774] sd 0:0:1:0: [sg0] tag#7927 CDB[00]: e5 bb b6 66 61 48 5f e8 05 19 c8 ea f7 20 f5 c0 [ 1947.130783] sd 0:0:1:0: [sg0] tag#7927 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1947.139705] sd 0:0:1:0: [sg0] tag#7927 CDB[20]: a0 17:15:34 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) 17:15:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) accept(r0, &(0x7f00000004c0)=@caif, &(0x7f0000000540)=0x80) r2 = syz_open_dev$dmmidi(&(0x7f0000000580)='/dev/dmmidi#\x00', 0x1, 0x400000) write$P9_RLINK(r2, &(0x7f00000005c0)={0x7, 0x47, 0x2}, 0x7) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffb, 0x92, 0xa6, @buffer={0x0, 0xb3, &(0x7f0000000040)=""/179}, &(0x7f0000000100)="5eaded7014c5ed7dac054e683604aaabaca200c863e569c9355bbb1eebab2bd661fa98e79967162cbcebcd4ee031fc96fd63f4f80333304edbc75d752154136adb1d8a413a9c4f362f932a946a46897599610a21d8c0a0a19425e8625e7b53da59ac5745cef21a4afc1551740adca7e90f18986f84e53aa6567fd745df9928ec6b3b6bce9fb063741b4f8ec2f5852e799ad1", &(0x7f0000000240)=""/152, 0x4ab6, 0x10020, 0x2, &(0x7f00000001c0)}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000600)={'veth0_to_team\x00', @remote}) setxattr$trusted_overlay_redirect(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='trusted.overlay.redirect\x00', &(0x7f0000000480)='./file0\x00', 0x8, 0x3) 17:15:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe80919c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) [ 1947.379503] sd 0:0:1:0: [sg0] tag#7927 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1947.388549] sd 0:0:1:0: [sg0] tag#7927 CDB: opcode=0xe5 (vendor) [ 1947.394853] sd 0:0:1:0: [sg0] tag#7927 CDB[00]: e5 bb b6 66 61 48 5f e8 09 19 c8 ea f7 20 f5 c0 [ 1947.403819] sd 0:0:1:0: [sg0] tag#7927 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1947.412787] sd 0:0:1:0: [sg0] tag#7927 CDB[20]: a0 17:15:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x5450, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:35 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'trusted.', ',\x00'}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) 17:15:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a951f123c123f359bd070") r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) r2 = gettid() ptrace$getenv(0x4201, r2, 0x7f, &(0x7f00000004c0)) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r3, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x167100, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x7ff, 0x7fff}, &(0x7f00000001c0)=0x8) openat$vfio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vfio/vfio\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000240)={r5, @in6={{0xa, 0x4e24, 0x7fff, @ipv4={[], [], @broadcast}, 0x7}}, 0x0, 0xab82, 0x6, 0x800, 0x88}, &(0x7f0000000380)=0x98) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f00000000c0)={{0x3, 0x65}, 0x0, 0x3, 0xb6e1, {0x4000000000, 0x7}, 0x7fff, 0x1000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f0000000400)={0x3ff, 0x5, 0x9, 'queue1\x00', 0x5024}) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000140)={0x1f, "a8c494ad2280bfd34c236927b5ed4512abcd7094f1430a54d42f1ff4c06f7818", 0x3, 0x1}) 17:15:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}) 17:15:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000240)="83cb36489bd04637b06644d5ed7918af9af91fa5d7d070000000e62effcac51887e0c3fa5342781b996ea5d69e3cd2851f3fd5dc5ef82039c5aa75275ce101b3a82705db6d120617e157e5ba7de60b25b697999079682cd97b") syz_execute_func(&(0x7f0000000080)="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") 17:15:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe83c19c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1948.045438] sd 0:0:1:0: [sg0] tag#7789 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1948.054362] sd 0:0:1:0: [sg0] tag#7789 CDB: opcode=0xe5 (vendor) [ 1948.060573] sd 0:0:1:0: [sg0] tag#7789 CDB[00]: e5 bb b6 66 61 48 5f e8 3c 19 c8 ea f7 20 f5 c0 [ 1948.069588] sd 0:0:1:0: [sg0] tag#7789 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1948.078556] sd 0:0:1:0: [sg0] tag#7789 CDB[20]: a0 17:15:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000280)={'mangle\x00', 0x1b, "d05d41c03366ae667e052274a1b4a3a3535cfbbeac80fb16b5efe0"}, &(0x7f00000002c0)=0x3f) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x68600000, 0x101000) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f00000001c0)=0x4) r3 = accept(r0, &(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x80) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000100)=0x60, 0x2) r4 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000140)) ioctl$SG_IO(r4, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84419c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:35 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) getsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x100) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x11, 0xffffffff, 0x9, 0xa, 0x0, 0x70bd26, 0x25dfdbfb, [@sadb_x_nat_t_type={0x1, 0x14, 0x6d}, @sadb_ident={0x2, 0x0, 0x1000000000, 0x0, 0x10000}, @sadb_x_filter={0x5, 0x1a, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast1, 0x1b, 0x4, 0x4}]}, 0x50}}, 0x40) 17:15:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}) 17:15:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x5451, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:35 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f00000005c0)={0x0, 0x7}, &(0x7f0000000600)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000640)={r1, 0x2}, &(0x7f0000000680)=0x8) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000740), &(0x7f0000000780)=0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80280009}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r3, 0x202, 0x70bd25, 0x25dfdbfd, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x11, 0x2, @l2={'ib', 0x3a, 'batadv0\x00'}}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x523000, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f00000006c0)={0xfffffffffffffffa}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0x4, @empty, 0x8}}, [0x7, 0x8, 0xc72b, 0x1000, 0x6df5, 0x6, 0x0, 0x5, 0x4, 0x1, 0x1, 0x7, 0x800, 0x8000, 0x2c709680]}, &(0x7f00000004c0)=0x100) fstat(r4, &(0x7f0000000900)) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000500)={r5, 0x6f5e00}, &(0x7f0000000540)=0x8) write$P9_RRENAMEAT(r0, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f0000000240)=""/101, &(0x7f00000002c0)=0x65) r7 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r7, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x18e, 0x0, @scatter={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/18}, {&(0x7f0000000080)=""/143}, {&(0x7f0000000140)=""/120}]}, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0}) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2) [ 1948.279918] sd 0:0:1:0: [sg0] tag#7789 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1948.288827] sd 0:0:1:0: [sg0] tag#7789 CDB: opcode=0xe5 (vendor) [ 1948.295211] sd 0:0:1:0: [sg0] tag#7789 CDB[00]: e5 bb b6 66 61 48 5f e8 44 19 c8 ea f7 20 f5 c0 [ 1948.304191] sd 0:0:1:0: [sg0] tag#7789 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1948.313183] sd 0:0:1:0: [sg0] tag#7789 CDB[20]: a0 17:15:35 executing program 1: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) 17:15:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}) 17:15:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x5452, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe86119c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1948.571924] sd 0:0:1:0: [sg0] tag#7789 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1948.580896] sd 0:0:1:0: [sg0] tag#7789 CDB: opcode=0xe5 (vendor) [ 1948.587113] sd 0:0:1:0: [sg0] tag#7789 CDB[00]: e5 bb b6 66 61 48 5f e8 61 19 c8 ea f7 20 f5 c0 [ 1948.596120] sd 0:0:1:0: [sg0] tag#7789 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1948.605191] sd 0:0:1:0: [sg0] tag#7789 CDB[20]: a0 17:15:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 17:15:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x8000) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) 17:15:36 executing program 1: r0 = socket$inet6(0xa, 0x7, 0x80000) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x2) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080)) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000000)=@null) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0), r2, 0x0, 0x1, 0x4}}, 0x20) 17:15:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}) 17:15:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x5460, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe86319c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x40049409, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:36 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x101000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000080)={{0x8, 0xfffffffffffffffb}, 'port1\x00', 0x9, 0x2, 0x67, 0x8001, 0x5, 0x3f800000000000, 0xbf, 0x0, 0x3, 0xc4a7}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) 17:15:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) [ 1949.039768] sd 0:0:1:0: [sg0] tag#7961 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1949.048768] sd 0:0:1:0: [sg0] tag#7961 CDB: opcode=0xe5 (vendor) [ 1949.055247] sd 0:0:1:0: [sg0] tag#7961 CDB[00]: e5 bb b6 66 61 48 5f e8 63 19 c8 ea f7 20 f5 c0 [ 1949.064245] sd 0:0:1:0: [sg0] tag#7961 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1949.073213] sd 0:0:1:0: [sg0] tag#7961 CDB[20]: a0 17:15:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000240)="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") r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000200)) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) 17:15:36 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) prctl$PR_GET_THP_DISABLE(0x2a) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x88, "04d2108462653816367889ae6780ed8d990a331bdab5979580d5507265a8ba8c062e44d2b6cda831651a5836c2fd043d9f20ad75e7be123e5a8691c813617591fce949c59e3f61271e7d579e472df0118c026a472d891ab0bad773c9b8a057ccf79cf79741e09e0c0ec6b20b408ab383fd79fbfff1088da8e5558d1162cb96b721e06a12bdb79033"}, &(0x7f0000000180)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r1, 0x7}, 0xc) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380)=ANY=[@ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000200)=0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x380002, @ipv4}, 0x1c) 17:15:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x40086602, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x6442) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001780)={0x53, 0xfffffffffffffffd, 0xe4, 0xfffffffffffffffc, @scatter={0x7, 0x0, &(0x7f0000001500)=[{&(0x7f0000000080)=""/94, 0x5e}, {&(0x7f0000000100)=""/211, 0xd3}, {&(0x7f0000000240)=""/41, 0x29}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/95, 0x5f}, {&(0x7f0000001400)=""/196, 0xc4}]}, &(0x7f0000001580)="38cfa5c2d274126d1275cbd3b81ff832fa687b4f240901e64b092ac6ac1158e6ea43135171a84a3432a4caae1ab8db2d893f07f769235435743a4427d5ecca28b0c086bb72055c451198288f6099c756a4a4bcba8dd85f902a2da668685365f26d5e54d7b95e6d775ea5fda9212b87199a8be0c3be51e0fce2d9300680a8cd6aa3b2070aa9ba0ff8ad2d3250b74af00ab4f1ff49bd7ac20994d4d7013a80ebb163510da65ead9e8daaf857a1cc99f7230775c870598c81b5636c461a7f26548a021a3f7aa5370094583ccd59e91b205cd4dacd68a36073bb0927eae852256b5983576ee6", &(0x7f0000001680)=""/203, 0x10000, 0x0, 0x2, &(0x7f00000002c0)}) r2 = syz_genetlink_get_family_id$tipc(0xfffffffffffffffe) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x100000a6}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x1c, r2, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}}, 0x4008000) fcntl$setflags(r0, 0x2, 0x1) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000001940)=0x7f, 0x4) ioctl$SG_IO(r3, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000001900)) 17:15:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 17:15:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe86c19c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x40087602, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:36 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e21, 0x0, @mcast1, 0x1}, {0xa, 0x4e21, 0x2, @loopback, 0x9}, 0x80000001, [0x2, 0x0, 0x3ff, 0x1, 0x8, 0xfffffffffffffde0, 0xffffffffffff2631, 0x923f]}, 0x5c) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) 17:15:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) [ 1949.426410] sd 0:0:1:0: [sg0] tag#7789 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1949.435523] sd 0:0:1:0: [sg0] tag#7789 CDB: opcode=0xe5 (vendor) [ 1949.441832] sd 0:0:1:0: [sg0] tag#7789 CDB[00]: e5 bb b6 66 61 48 5f e8 6c 19 c8 ea f7 20 f5 c0 [ 1949.450786] sd 0:0:1:0: [sg0] tag#7789 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1949.459733] sd 0:0:1:0: [sg0] tag#7789 CDB[20]: a0 17:15:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x8, 0x208240) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x4000, 0x0) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f00000000c0)=0x1) 17:15:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x4020940d, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:36 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000080)={0x8, {{0x2, 0x4e22, @multicast2}}}, 0x451) setsockopt$inet6_int(r0, 0x29, 0x2e, &(0x7f00000005c0)=0x9, 0xffffffffffffffd6) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000140)=0xe4ff) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0xd) 17:15:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) write$P9_RWALK(r2, &(0x7f0000000080)={0x3d, 0x6f, 0x1, {0x4, [{0x0, 0x4}, {0x1, 0x0, 0x3}, {0x4, 0x0, 0x2}, {0x80, 0x1, 0x1}]}}, 0x3d) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000080)="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") sendmmsg(r0, &(0x7f0000003b00)=[{{&(0x7f00000001c0)=@ethernet={0x1, @dev={[], 0x19}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000040)="8133ab0f27f89bde97e56508", 0xc}, {&(0x7f0000000240)="9f9bb0b9a475fb2891a9ebeac8aef0e996403fdd5c5ceec51d86bf56ed42c5d4deb0fac98e30772f783177ba6382526b1b1e93c506bd209ab26987ed5feca2ea", 0x40}], 0x2, &(0x7f00000002c0)=[{0x50, 0x3a, 0x7fff, "b0e6dc4cd4546f8948155f8291f26133ae446105beae4ba18d003dd2f2d35433c199410e30bd138bcdc1982626717585770e300881009b704624"}, {0x28, 0x11, 0x9, "2c551d5b99c08e6902e8b8e83b223f8fd3"}, {0x10, 0x0, 0xc196}, {0x70, 0x10f, 0x400, "c43814d2ae0f7d9caea9e1b8b5fdacfa3b3dba8dc404ca20d777addc7b217e616234959fdd0cca38f88432f6550b7bdb9ef13e517700283c044b26570f0f575f2f3cc2790ee6daf972c640dd904ac01eed62d71209df7acb31279b8b3f1f"}, {0x30, 0x11f, 0x6e, "b307ec54109e56591aad2c2ec597031dae7341f4086b8d5b03995d8de346aa"}], 0x128}, 0xffffffffffffbb0e}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)="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", 0xfd}, {&(0x7f0000000500)="3f45fac35783fc26fdc8af", 0xb}, {&(0x7f0000000540)="231ff8b243cdbe85d2e9bdaff7152ce0a4f98259c236c955974d6b30854f1a91840d34d07be64f4ac3dfa8d45e0cfc4d4c9e44f11424b19e35aeed8058f8ff8a73f55ea6a340d6586568562051816a0d51854c9ff80de474ebfc2a28f06a7659b8d24fa648c7990b62f3da5ca7766559629c25efedb9e8d77d71b5fe70c998951976d5c0", 0x84}, {&(0x7f0000000600)="dd9fadd6cc185986c1f79474268f46f3922fe3f8005a707953d978a5954dedb5ec39ace8197c6267b3288805e05e59f33fe9e0fdfa16c4ea994c4a6990f139cdad7e8dfe61e0457227c7f051ef174fa9a9300dc10ea3ffc790a0b97ade29642ef6d9e9a36f9ff226628f0ecdc13b61cfe43825ac96c661f7934a7a9b890619b1b95a0e2fdc437a94e020ae5e17f08b234e5b6a", 0x93}, {&(0x7f00000006c0)="b136ee0fec183661ae8bdaf4eda686deb27edf28872be243bcdb58b6513bac6dbc9ae094f6ba706231186083bdbeb4882377a987fda7827a3f4a10252bc92b0e55c807a1e629fcaaf7b7ef1a47a3c948b85f531659d5047ed828f661ca36c7c52fbc467dbafde1199e8faa22129c707227ae15f586488222e71fc183da230b62d03b81c5812dff7911d1bc0e12725db805ddaa167f839a3c86fb7604fd11504d18b1780b56dd97a2c360df7dd920bd11ab42f028e8800599c3e9a085c9942b9184e16cdc601694fbf196517ff1d85fc5da09d37c6253", 0xd6}, {&(0x7f00000007c0)="b8d46fde047c707015b7b6afbac7f14136dd3322bdd5d3b5cc8a47dcbfda1c76dcb0f3b7245477f394a8b6ee484c5f652691325d43907ce120f913e29aa2c66748230663645ca8f41b349cda6a2d82eb3286f6663da3313bc537ecd43cb534b9b5158680856d1641a89bc980afea4f38c51cf9e2dbc1403b356c002440eb33734c4e3c857729196249e4614b2a51eace22ecd60a9f94d4c27d08e4c1ab1105ca3cc4591092f46972b2210a542decc2f93f8429d9fa748cccdd8d071221250c5e85bcb9393a62c72e5f967d6525cc62d6915d69", 0xd3}, {&(0x7f00000008c0)="c7b37214143145ca518b9add5133d89086a9405b66fea99c3b2ca1894d5c95ad841745d8005186a5dbef84c53577f132d03f2ee24c21f8a066c9bff28158f780ded8243e40bb8f1820e5811fbd301dd49abd4f19d5b06cb114ea245a3ef1180499e91b5c9907de609c080e579ef36ce68f4372c0b28dc0c406f55e210daad2044fcf56aa43699ca68f51cf6aaba2fd030529ce0fb1875d43cee6730f24b65dc9e8aa22c84a2897a07572862087c290b17376294558195aa1", 0xb8}], 0x7, &(0x7f0000000a00)=[{0xf0, 0x19d, 0x40, "3e12b70c516ea312fe9f320e431e2ac08217c51a18e11b3a1eb1d6a72b0d0965b0f30409c955d47f73300fcb1dc34e9f045d02831a278276f05369a4a48bcdf328a0a61fe883f9efce12125e68e036bdefeda44bb834be36e2af80cb845aed24637167f77dbf990b5a2e5000b6acac93d8a7d4aa38aee94462d0bc3526623fc3ef92a84599905130941d5332dc81c4fef9deee2e7fdcad770155b50574fe8aa923d31daa887a55f7bcaf9cd951325a8d49765331c09917ee230607d497becacd001126437564870c59fd318de8c62e028d6978d1b9d1b415ec"}, {0xe8, 0x0, 0xe, "bc7d53d8b79274f6059c03b97eca530d93936f3d27f3bb2108e2e255a4a140b54af7ccde4dd6bab059404c1c3f7bb5e84717a58fe63b5467c8f834b1400885db5cc17ce5bace9c25e0f02903478cb44544ffc1d4a4b31c423f6a128b257c861ce5640be3c11aa45472c778a4fec7357ae1668bddb17a241829a5a58fcd81e20dbd6b56c88a0f9b42c4c4df16fe5ee6f4c45b4da01e7c545d5f3c6965cc13099cd8974467a9889d1f0bb8bfa9a2484b70f80ba46661dae8a4be765e1532d16e75d7c0381475aaf2f1321588d806b980a1c2ce525649"}, {0x38, 0x1ff, 0x0, "71ef7b64101ba66e9d57b04b26f892041b99a3c7c8e916527269e5ec33ab3d128e09eb"}, {0xb8, 0x12f, 0x6, "bed8daece096f210ff14f3a2adeab1e350055422cbe7b8c1166704efff76a68f85a1a20f48ea7c4a0228abf8bf3d7fbb1216275717447e224d3b0858689ed16e867e8ac60d516e11986711b1c6d83d27bb6e441aeefe55b6018dab4f6e32d262b326d77770ef88b21a98a0b6b6b5d486e985788a7ce4886837546527a7929cfaefd9a5757960b7c74fce298f090367af4998dbc0d12d477121addc6dc2cf9624c35a0e"}, {0x108, 0x1ff, 0x7a62, "fb737874395185f4344e02d61d27aa96f61ac3f576764b1f3aeb4a6db0fe615bdaad8599440b23756ad037dae4e1d15a33de34cc51cdd0dd1b9fdecf3e2c956cca37e41b1bf2d33768dfca21dabdef3c80eddf7b5f9775f08828a8758ad51d14d0979b7d6f444359a23c18001c717c68f47728d2bb5080e035050125b91bf40cadfc0d79786410312b3962370e398cc62c13c879be38cce4a1d0a172738debda574159814874ad9b218f7b19e5d1ba2bab6c0ea9205e99e3e24ff1afe81c5a8004244d2ba0e1f367b4e0326c9e1c9d8e145ec6d04c50606b06a62f2d6ef9bc6bbe5f43158698b779d1701bbd48acaf0b6d7f"}, {0x98, 0x19d, 0x6, "ce3ed04e5f689e09237dabaf7fc3499a7fd0aced9d8c62f62a8401d0e5e4da92005e812a5f383b3a2a35384a3062755aaefcf829d9f7a3488cda36e44076bd7916c2dd66d2eb5d868f87bde8293f373739d22c12ccbfda69324d9ab13996b17d2751f698d16d91adfdc98ee128174ca3706b19daeff5381b3be9a777c1248d60f8cc0493cf4059a7"}], 0x468}, 0x6}, {{&(0x7f0000000e80)=@sco={0x1f, {0x8, 0x7f, 0x2, 0x5eb, 0x4, 0x3}}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000f00)}, {&(0x7f0000000f40)="4b924888a13dce792cfc36d70e4e7653c76b36c59dd3e2c5973e6dbdfc8f4d0fca75a20a9f5f741eb227b132c4e62ba244f3998b69c36e44009bf5774632cbb1b2271e00c82a974959e5041bf4265b7ecaa470158683a735bcac9fa25f45afbfd7128236aada33618405acce120a4c917505c4b75b512c946ddfd3b43775d8e2e226880a64ba3f3bb2dfac0d356ece25714a185025fa9d067a643918874a7df0921496363378d1064f5e322933ad4ba04b1d44ce9d805070ce604147744214ec0f48b9b0e7e913fc922778a87e1df0b31efb18ad850b20", 0xd7}, {&(0x7f0000001040)="f5e894d601d1e59d1037c3d00a2a3cc0bf427fcfb89101159f2236d5e880be5d39dac3652f6dcc8466149ffa626f3ac33346365d61b54790d6a12add56ce959e789ecb8676490f17eb17faa3d5077fb3327a6bf89cc6872f86d335d8c2ab2cebb4785ed8afa5617dc07e2d3965e1b88e87cfcf878b4df927d5ba2158a6b12e2a9f30c76035049e283d54f8d574561dd9061fa78493da5fb905eaeb8b0c9fffa0a33be2", 0xa3}, {&(0x7f0000001100)="ddc6652fbd02815903669b3e7296b9ee687bdd01dcd4d5fd845f8fb87b", 0x1d}, {&(0x7f0000001140)="95f9254c8927e4e6f1f6ed08565799dc59301eb9b3de2851ca99f8b2f9e09ae82cae146f539f513554a9f241a6f56d74244a83e4e62034435e078126a57647c9aac143a588bcef61f8191c0caa713cd3bd4223a0bf81b9346973f8f914abe18451db7ed170d087211770db612bbafd01da5d3164dd2edb8b868767a4b2503751aa80ab118ad25418f222ff716ad01a458969bf1c4356a169325468ca4de1dec09272fd7cf194bd62f5ca2e2cc850459b968594913827e952f7eaf4", 0xbb}, {&(0x7f0000001200)="5fd7e042b076f8", 0x7}], 0x6, &(0x7f00000012c0)=[{0x80, 0x0, 0x9, "d5eedb27da9b0c958b9703aef4935d5002c3a54a5fa9bec7b1d267210e1315117752cff32b4682f5f9dde1703d476c16877ca62c741e2fe2887a84dfd633ad5f060eaccf305ca19391984c4d061771eedb67c893e73fac5677670bbc46710fedf06570c07f34be15285d2ab77fd8509a"}, {0x1010, 0x0, 0x800, "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"}], 0x1090}, 0xfffffffffffff012}, {{&(0x7f0000002380)=@ethernet={0x306, @random="bfd9bb8ea598"}, 0x80, &(0x7f0000002780)=[{&(0x7f0000002400)="8f08da987471891a40734e4e8daf3404d63ac4e31ac14e86ec00332e2b6b326ffd87a4e80310cb4c84c4ebc9ecca4ba495527535f0fef096880b82ad918d241848e84fe8b13ae3456a4ef6aa5d3e238a01db33b83f343036b369a32a85a47a1b4e662f065f8faca950b28dd0647059329be92de43295b42e7a909439ffbafdb9942ebc13e13c58f9f4305f0366c3df1ecf0edcd8a447dc67c9a083fc767b9f97eed26439426be410849b7e87083c74154e019a8ef1867288ee4494dcecfd5f3f7d1f91df9950bb4227a7eb1bedbc41bbada1691e61b0c8244252c30eb2fe5c8e", 0xe0}, {&(0x7f0000002500)="b86482feaef6e5a254230d1eb5f2e33a2e76d18545204e9009407ee489f23b9fd789bf551268718d", 0x28}, {&(0x7f0000002540)="997af219fdefe88dc5dc94f31ba9697add2e1f595d9972647cde12fed66d837843dd226b5447707c9e7d03502cc8859d77b474c2fe61051e4978dd22055ead5531b3c56d4784c33c4c1bf1a330a12e0d695533bceefd4a2c0c63287e3df6ca87", 0x60}, {&(0x7f00000025c0)="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", 0xfc}, {&(0x7f00000026c0)="90f79f09be99b3f8635bac6862fdf7534ea107b23ae5c3accb22952a668411133e053539866717879941929e60c79172f212a2c683f225141d473d5838f44e", 0x3f}, {&(0x7f0000002700)="ed22a14cfe0f66247fc35b233c8bdb1b6633d62ebf669c8ccf7a91db1ca2a04dbc9ff02bc3ade36d4bcee2bee2f26992ad7253b061bc7dd11f596b8a8846712834e869330ed92cbabd537f2f84edb8768fb5b6ebb67cf843cdf30c9a40fc9aa709d60ada8c7925666b20", 0x6a}], 0x6}, 0xfffffffe00}, {{0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000002800)="5ea3b7251440cd83dc08d6a891cd43b8845802425c8681249330249eb5b325efb5c4737cc62c190d1e703af1aec40e7e4fa484c4063c6881332076f04249aa3e52eb532028dab88eee4abc29ec7faae95c392e913199ed90126d3b77c5f73ac830e0a6da19bfa2e8782fd863c7fcf7eb1ac7dd3885d53c673a57cfdff4aa9ea040f3927a56e03a966603cf0d16b84ee96c65a14a81818267384eadb0268da41a4a4ab1ea38aa8a4580abfe35f732da2708e70fc7aba2ead53320efb98392f140ee470cc8a5ad7edbbc51fd7fb24f77cbf01d2e43", 0xd4}, {&(0x7f0000002900)="9450afc5318f2e6a716773bca4714d8cbd11cbccd4b47b0e644edd125160d40702806b3d2e658bf48e2c4954d7fdfc61f5cd21de15a139b4c17fc91a1a717083efd9831862de52a947487057e853b2f8cc2b3828", 0x54}, {&(0x7f0000002980)="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", 0xfa}, {&(0x7f0000002a80)="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", 0x1000}], 0x4, &(0x7f0000003ac0)=[{0x20, 0x139, 0x1ff, "830e9c73bdceb78d8ae092d385e4"}], 0x20}, 0x8}], 0x5, 0x15) 17:15:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe87819c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 17:15:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x80086601, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:37 executing program 1 (fault-call:3 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1950.282357] sd 0:0:1:0: [sg0] tag#7789 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1950.291307] sd 0:0:1:0: [sg0] tag#7789 CDB: opcode=0xe5 (vendor) [ 1950.297522] sd 0:0:1:0: [sg0] tag#7789 CDB[00]: e5 bb b6 66 61 48 5f e8 78 19 c8 ea f7 20 f5 c0 [ 1950.306594] sd 0:0:1:0: [sg0] tag#7789 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1950.315789] sd 0:0:1:0: [sg0] tag#7789 CDB[20]: a0 17:15:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) [ 1950.335166] FAULT_INJECTION: forcing a failure. [ 1950.335166] name failslab, interval 1, probability 0, space 0, times 0 17:15:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x7, 0x1) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1950.389635] CPU: 1 PID: 4460 Comm: syz-executor.1 Not tainted 4.19.38 #6 [ 1950.396568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1950.406039] Call Trace: [ 1950.408670] dump_stack+0x172/0x1f0 [ 1950.412337] should_fail.cold+0xa/0x1b [ 1950.416288] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1950.421431] ? lock_downgrade+0x810/0x810 [ 1950.425615] ? ___might_sleep+0x163/0x280 [ 1950.429881] __should_failslab+0x121/0x190 [ 1950.434152] should_failslab+0x9/0x14 [ 1950.438063] __kmalloc+0x2e5/0x750 [ 1950.441638] ? sg_common_write.isra.0+0x1014/0x22c0 [ 1950.446715] sg_common_write.isra.0+0x1014/0x22c0 [ 1950.451595] ? selinux_ipv4_output+0x50/0x50 [ 1950.456035] ? sg_open+0x1820/0x1820 [ 1950.459781] ? selinux_capable+0x36/0x40 [ 1950.463878] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1950.469451] ? security_capable+0x98/0xc0 [ 1950.473628] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1950.479209] ? ns_capable_common+0x141/0x170 [ 1950.483646] ? capable+0x22/0x30 17:15:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x80087601, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1950.483671] sg_new_write.isra.0+0x700/0xa70 [ 1950.483694] ? sg_common_write.isra.0+0x22c0/0x22c0 [ 1950.483714] ? ___might_sleep+0x163/0x280 [ 1950.491513] ? __might_sleep+0x95/0x190 [ 1950.491530] ? avc_has_extended_perms+0xa78/0x10f0 [ 1950.491544] ? find_held_lock+0x35/0x130 [ 1950.491565] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1950.491579] ? scsi_block_when_processing_errors+0x312/0x410 [ 1950.491593] ? scsi_ioctl_reset+0x890/0x890 [ 1950.491605] ? avc_ss_reset+0x190/0x190 [ 1950.491628] ? kasan_check_read+0x11/0x20 [ 1950.491648] sg_ioctl+0x917/0x29f0 [ 1950.491669] ? mark_held_locks+0x100/0x100 [ 1950.545411] ? proc_fail_nth_write+0x9d/0x1e0 [ 1950.549947] ? sg_new_write.isra.0+0xa70/0xa70 [ 1950.554568] ? __fget+0x340/0x540 [ 1950.558049] ? ___might_sleep+0x163/0x280 [ 1950.562228] ? __might_sleep+0x95/0x190 [ 1950.566252] ? sg_new_write.isra.0+0xa70/0xa70 [ 1950.570870] do_vfs_ioctl+0xd6e/0x1390 [ 1950.574881] ? selinux_file_ioctl+0x46f/0x5e0 [ 1950.579406] ? selinux_file_ioctl+0x125/0x5e0 [ 1950.583935] ? ioctl_preallocate+0x210/0x210 [ 1950.588379] ? selinux_file_mprotect+0x620/0x620 [ 1950.593175] ? iterate_fd+0x360/0x360 [ 1950.597015] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1950.602615] ? fput+0x128/0x1a0 [ 1950.605932] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1950.611507] ? security_file_ioctl+0x93/0xc0 [ 1950.615951] ksys_ioctl+0xab/0xd0 [ 1950.619437] __x64_sys_ioctl+0x73/0xb0 [ 1950.623371] do_syscall_64+0x103/0x610 [ 1950.627298] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1950.632528] RIP: 0033:0x458da9 [ 1950.635741] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1950.654675] RSP: 002b:00007f4b63b77c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1950.662423] RAX: ffffffffffffffda RBX: 00007f4b63b77c90 RCX: 0000000000458da9 [ 1950.669732] RDX: 0000000020000300 RSI: 0000000000002285 RDI: 0000000000000004 [ 1950.677032] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1950.684332] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b63b786d4 [ 1950.691643] R13: 00000000004c2a27 R14: 00000000004d54f8 R15: 0000000000000005 17:15:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 17:15:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x200800, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x9) r2 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0xffffffffffff659c, 0x8001) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000140)={{0x3, 0x3, 0x8, 0x1, 0x6}, 0xa2, 0x6, 'id1\x00', 'timer1\x00', 0x0, 0x5, 0x100000001, 0x8001, 0x8}) ioctl$SG_IO(r2, 0x2275, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffd6c, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000240)=0x70) 17:15:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0xc0045878, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000080)) ioctl$SG_IO(0xffffffffffffffff, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r1, 0x200, 0x70bd26, 0x6, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3d}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x15}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netfilter\x00') setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000001c0), 0x4) syz_execute_func(&(0x7f0000000200)="984a2ae92c7e964c0f05bf04004000c4a37bf0c50341e2e9c421e5741c14c4e3f963f0360f383a9e020000000f0d2046205032d2e5d24b264b2638091e8f897c80443f004583eab1d19a0080000031f3bf7ec4e10bfa0bfa0f3a412935f2f045f61964f000030f42d2c461755575cec4a2adb96d42262e2e66450f7d64c60865f2ad4865f20f7cd8efa1a12ad764d38f53efc4211de34f006766f2ab440fec3f66f3adc4c162b1f72e2ec489309271d8d8000000000fc4634148f70000c2c461ab59642dcbc481cb5ac736b2aa66450fc4650000d3da43a171dd4ecdcda2660f38346800c4e3295d36d8e5c422b5abf37d75c4426507af0f000000a2a25fd25cf3460f2aabee320f7ba5a9a50000ff2ef2af79ca553131fb260f9159073b62") 17:15:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0xc0045878, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}) 17:15:38 executing program 1 (fault-call:3 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84044c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000093f, &(0x7f0000000040)="6045ccd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1951.287284] sd 0:0:1:0: [sg0] tag#8055 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1951.296286] sd 0:0:1:0: [sg0] tag#8055 CDB: opcode=0xe5 (vendor) [ 1951.302656] sd 0:0:1:0: [sg0] tag#8055 CDB[00]: e5 bb b6 66 61 48 5f e8 40 44 c8 ea f7 20 f5 c0 [ 1951.306208] sd 0:0:1:0: [sg0] tag#7790 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1951.311768] sd 0:0:1:0: [sg0] tag#8055 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1951.320419] sd 0:0:1:0: [sg0] tag#7790 CDB: opcode=0xe5 (vendor) 17:15:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}) 17:15:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x2, 0x2) accept4$tipc(r2, &(0x7f0000000280)=@id, &(0x7f00000002c0)=0x10, 0x80000) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r0, &(0x7f0000000380)='security.capability\x00', &(0x7f0000000480)=@v3={0x3000000, [{0x6, 0x7}, {0x10001, 0x20}], r4}, 0x18, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x8d, 0xf, 0x0, 0x1, 0xffffffffffffffff, 0xffffffff, 0x40, 0xfffe00000, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000100)={r5, @in6={{0xa, 0x4e22, 0x43f0, @remote, 0x1}}}, &(0x7f00000001c0)=0x84) 17:15:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0xc0189436, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1951.329434] sd 0:0:1:0: [sg0] tag#8055 CDB[20]: a0 [ 1951.335666] sd 0:0:1:0: [sg0] tag#7790 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1951.335692] sd 0:0:1:0: [sg0] tag#7790 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1951.358590] sd 0:0:1:0: [sg0] tag#7790 CDB[20]: a0 17:15:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008910, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f00000001c0)='ppp0{\x00', &(0x7f0000000240)) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x6, 0x107000) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x2) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/enforce\x00', 0x1, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f00000000c0)={[{0x4bf4, 0x8001, 0x8, 0x800, 0x0, 0x100, 0x9, 0x84, 0x6, 0x7fff, 0x3, 0xfffffffffffffffd, 0x5}, {0x6, 0xba, 0x40, 0x6, 0xfffffffffffffcc5, 0xfffffffffffffffe, 0x4, 0x9, 0x3, 0x0, 0x80000000, 0x5, 0xfed5}, {0xc4, 0x9, 0x10001, 0x9, 0x1, 0x9, 0x8, 0x5, 0x7, 0x2, 0x40, 0x20, 0x1}], 0xbd8}) r5 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vfio/vfio\x00', 0x101000, 0x0) connect$l2tp(r2, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x3, 0x2, 0x4, {0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}}, 0x32) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r5, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 17:15:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0xc020660b, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000080)="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") 17:15:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 17:15:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0xcb6, 0x200) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0xffffffffffff0001, 0x4000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r3, 0x5, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x0, 0x5, 0xffffffff, 0x6}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x80) write$FUSE_STATFS(r2, &(0x7f00000000c0)={0x60, 0x0, 0x8, {{0x44, 0x1, 0x800, 0x3, 0x5, 0x6, 0xdf0, 0x3ff}}}, 0x60) 17:15:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0xc0481273, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84061c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1952.275211] sd 0:0:1:0: [sg0] tag#7790 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1952.277911] sd 0:0:1:0: [sg0] tag#8070 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1952.284251] sd 0:0:1:0: [sg0] tag#7790 CDB: opcode=0xe5 (vendor) [ 1952.293173] sd 0:0:1:0: [sg0] tag#8070 CDB: opcode=0xe5 (vendor) [ 1952.299293] sd 0:0:1:0: [sg0] tag#7790 CDB[00]: e5 bb b6 66 61 48 5f e8 40 61 c8 ea f7 20 f5 c0 [ 1952.305556] sd 0:0:1:0: [sg0] tag#8070 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 17:15:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x25, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1952.305579] sd 0:0:1:0: [sg0] tag#8070 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1952.314659] sd 0:0:1:0: [sg0] tag#7790 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1952.323669] sd 0:0:1:0: [sg0] tag#8070 CDB[20]: a0 [ 1952.347386] sd 0:0:1:0: [sg0] tag#7790 CDB[20]: a0 17:15:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 17:15:39 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x61, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x1267, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8001100008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000080)="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") 17:15:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001700)='/selinux/policy\x00', 0x0, 0x0) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000001740)=0x80000000, &(0x7f0000001780)=0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000100)={r0}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r3, @ANYBLOB="000029bd7000fedbdf2505000000200001000c00070010000000300000000800090071000000080009000e00000008000500ff7f00000c0002000800070007000000140002000800050000000000080003000100000048000200080006000004000014000000000000000000000000bb080002004e2400000800070000080000080003000300000008000b000a000000080002004e23000008000600ffffffff20000300140006000000000000000000000000000000000008000100000000000c000100080004004e230000"], 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000380)="9ec5f722d448e96bb3ab9504fd38808c5ad295fe04d02349c2aac8ae9bc64fba917be4c5be8583c42b99f828b0f992d301c7a6f4f20955f63ce8ccb6bc3abac7c40418327e7e2039f925804dce7b1f4f73fe4d4f31413efc8cd1107ea465c1954acc7c78b454ef4fb4b09adb655aaa9ab4248bdd34fcc8472f0d6ef795f22d41f9e1db0318eec50ea4cf0402e6413874b6c77758b84cf037ec038b0a08c89820b293828c7401219dce6629cb814282eab75d614f94aa7a313b0cde88613b96fd0527de1e734d499f8ee71cf98cf0a9ef947ed79606175bdd0c9e6aeac32b603d1366af1d882e44f2c8432df2feea169069a3bf5243f13897567923732550bf75aef1ce9123f6de0f8db61b80fbb4ba1e08f62498625e0987e147c728b4e507bfdddbe6c434c775d4b0950c5be896e4f970af7fea9d50253ce342c47994ca6a5fd0c242e969e0db08e559ae4931bfc6b777c0e6642f3119e699b90edf929ce43e44732e2e40275cd82426c6c23e3c82bb84d73bec06aaf696b6e3e4bd37af299d4eed5064e10ed97b0ef09062433fc45369942e75a655e10ad135dd76372eabf49871108861ea332a4adbad957fc451576e19bd3945f10ec70f695a6141dd971e6703ecd56cf4961a0c7521741608247a3634914b814f5c2f369c22bd2fba6e1c1dddc376898bb68a9c78b233ccc1d93f89cabe1e4dbd55b8fbf4a55dc7d9623d05654b9c0725926b83ed0a12d13e4b5aa17b86056b05be5cf207b9c8067d54f6824e050e37a1a89bcca811fda656af9e523b77c08e6ded7f9e0b0224ef9f5e1a030305cee60d4b75cd584fd0858b805ea5c04651043598352f2a8e0119448e657d6fe3baad189dcc922ebd0c1713293f10d97232fe64701f82ecd561898df61437689dfa718a6f2130ae0b94b7ca822b64f5e1436d36051663dba74d9cfd06885782c6acf4c68edb305283acf1567e1ef3e6c142caa0e7c0fc5b5a51fb415a9c24ea92728d3540c378a945bfbbeb774b43f2e120d1353cc5287a6db766434a1d5c1137a93a475e01fe3a9e09fe672e25e395367bc279c2a38d2783bafc65e28cd20b56331f6e5a241e24bf27a049c41a9a67b4df468256cd7761766c4e673b50817f9afa53b5a44d440e0146b9af6de9755ae50c26937fb53a3693d4290793c3040258ffefd35fb6c2ccfe010e0630c7bec25649c01ea4a1eef0cc752045002f5074526948e34426eb4aab89b5d462965ca1084518b69f7f14595772f11fd2071af69ea6f9743820b48f47bef86e8767c4b7523b4a96c65264f528a05f212a52eda7df4b23493eeb701124d80d63b57e493de7f6de0dad28943e321649d694c2922114026a26780be6c21d988d7dfdde735fd6991d84cbf6a65c667d6ee589c6399357c22faab04bb6b9ddb0f62a96b3b28a87ddff1c513037dcb1d638a95cc796f41e9766f6a40d7f3abd027e4dbc50a590459c242e366a8d7886000437682b1e873c21d4dc9d624399d68c7572e2728512cb1c4ab0e4daea66cb300027cb8ac638d06e97dd1e1b2eec6a5f9502461d8dc320a6bc448b5baa6729c6db7144352c095e5e6e528a288ff9029eb36b9fa1abd779bd6f073f372da512b1070acae5e462b03fe6c1516b282557fec9a1be254291b72c13e6f3d72cb7b3375e56898a6bca863948950b94abb3c5ae2be080cf1334f9e380bb7e6e15fe133e1d9cc932ed2cf8940e7cda3f57524a4a297215a59c04541366da45faf8bc24a72684923447115948238ca5fca5b2f11d48f011edbb1ad6c4f835c014265d077aadfdb3ee3679377ba48df78282ba88a32db6c84fad5737e8384eb6a068d98cb843d8eae03a3702d3d164f1ae13d33742ec7c83ab1effa70e5610a2c5ddb0513cd0bf903e83bcbc0563a8b1e3158970ca982f4caf20fdb493e85a81ab43b1a666c4788f1828e4f740151768a97f6a8ec9109f8cdf9de1e9a4e0c520018a05655005efbc212145d1cd72145583462eebcc6074f34040ca6ed6d365768ba2bbf980055d64c2279b90a6ff739cb5a32bb9c23e8e1e474dc1134657ed37fa847829e6f42c10d043659e42c6c5e169b8c088c9127f3225d3f572114badfbee99aec53b69fc7a2f9c3aab4e889ffbfa8a407a1c15aeeb56ec9a4ca4dfeadf0af1cd52513e7243ff959a66fa0d362030264b3514de627bfd2c1d6f168951b68cc0b5d0d179c1795b71c259a10fb05a9d628671193641b75d4011d11f579d5b970b7950a6277542bc3e75c1d6b8075c587fba614767667342c90b9abb21b5d8e8bfc75fa874f5f6e3a43e951b898c6700e600b424b381c835a96d801b6e4b81f622056a930178cbaa66d902bd817d28639b6091dbc3e7614133ec611b7d57ef3fea115fecf32bfeba79113806b4f181a4770c1b8f834b7af18648414deb8bce461dcdf1943382c44b50ac1f8298e115c6f48716dc5293cebba7bd230d4905fc0f0ecb718fd3dd651788843558d29c192414f0ad8edc2722bcc15467be347b7628b13d77d9729e38572072d39439ea7e8abdb77c7d31be4257338e7ee6b58ca5352f3a8952b0a795682a24b27d9264900dde0afffa448f67165fc6d6c07c54ab5259872e989ec875fe6f9959f4abfd99004afc9798973962fdd71539ba0b791c82b586350e451a55a9bb00873e4919375ba2486a8c5e3d44a43adb26cd693f2cd0d972b9f8fd9d61036dab41528060fa95c95948570f8423e9aa0de759ce24430614ec9c629a5326e5feeff2c5c32e3a05c95adcf81b3fdb1eb72ea42160359dc5561e72e0071264a3d67d88566453344eb0ac970134bf61612c3951ff48b8e39fcb5ad81bcc0eb4ef01798a95219e89423dfa97d203c61ea5e1f65b09be4928bbdf0d71b2ec40ea4a5852fa6732d1311a546a00b66791e6861834b82a8170e50303e79d70aa418f86bdd1d044ab97f55df6b7039cd2e3cd685e9c36fd2b8e5329bba44669f7bebf04500a145e5f784f3692d4a343468a1e6298bb3d38df8a078bce9c4dd60ada38f8983d0f47f12caa43ceeb9b1371c01781c72b161090ffa5f710731ae44ed898b666947d357ec4dc8f574b8cef39b4fba1153eca98efdcf8050f19006fcc5241625f6ce4a0612a7cc2c1753403c80e96eff199aa147a9c16facc280250ed12237f5d4c492dadc83684c60a422661d0480d115699f7a2e64956541b3f9879ff6ac73b2ff7d27d701c7eff5d359b032d50e8dc639507ec11de73549de68bfe028097b71afc0ffa40ee9fc7fb9cf4fe67327192999fe5f201184fe845ff33382bdc363238b7510c9737d98b19c3f00478fd3743e0df1a4aa8a604296847d67a38fa55ec94f5099a45b2671a68332391197b8058b8c949d9d6a000740aad16e27fe13fd46b4f77235d15c5424a1a7f954d326b861624c5d49662da7d583e4bba062941a67aa8a974210c84020f6e5e73b6eef87c3c54f98a2916361685e42bb7aeb36a3b6f32769588dc4201a6b297a92f4f18779826f01a7dad3249f684791e1db752f078d8f32db2f7b94237b5618e32b65d5a8419b36dda9910f77f0240c4c3d3b5b952a81a579c7b12b09c724f1d9de914d52389c6f6c076316a9cbfcfef2a134ed8ce2859352716a7ce309502cbd92138c55b3b5d45980544bd3adca407620a08ef1af00339264fc9fb7f4733f3998d09708338ff0aef36023363358ffeb868feb1ce7501b9d3eae4ffc13b4a9c98dddc4c479db453c20092748b1b1f647c63d3d2521ffc1b0bf0f46b74c015a7c805fa738d96d1e8086018ace0bbc4c024d3ef3d575ad05dcaf4589280f4102e886f88dedc77d438c74bc7284979651d32ba3f03919bb371d95fa80bbac92ab5d6104b2679a811019c14aadf4f7dbd71e127e85687e0171cc4c07b1ee409f639359f7f7d068968f2d3aa072d5d1b043926e81df1d8ba97774a69f15b846f3bf5c064e9f383ea98f64fa28a2cb00b3fa15eff4881bac3eaf1738337a79e9f88dd851a04e782e2a3f54c21e2d0d0818214ee587e840f89e8267b1ccc4e00603d744f701c5f881192ea827da3e53b18c1325d61c8396856b56f276d366068ff39bd4ea1446146d5621297473f81e54d394c1d2f95f6485798f44161c88e1180198696edf66d713811fd335ad93a6aa7f84184ff38322bdea2681fe2ec3270d0bf3dbe5c16cf1c71a57903ce1dc1d9566f4829de5c1cd3e61119ea2f65305b6c0a7f99b312f7cdda758912dad3b2b8d0abaa9615e5b775f0cc6f166256f5f9ce120aa34daeff7b4db4ad7e9f3dd35c30c4fd637745f926b0fe8aff58ad179bbc8ebb281f655a46d144c18e807f763faf26eaa82ba05826fa8021d392a331df47b56ef17777e1a7abde689fa6cd2d2c17bda695d70a7dc0760f56ec06641986320fb4cb4cb3029ec3f7c2c08b144c514125004805296e08a3692f65952d3f588a355e1c7237ecc22f4d76e658d8d21f38ef64d19d79128a9f0b89283e166f16e818126e55f5f032a69c31fa851f026ab5887c919fdc105e7572384dfd5558819d9a92ce8e70bb6a2ae8929f22154f68ffcf78a5bc0de4441e2a7963e8cddffc24f30726052aa4b98739d31a7da3f14c7bd086e36d866517c9f5807a07454772cd7874b09089724e47d9d4d02f0e37b0be8f37dd938a055a4caa7fa1d731bec86c5f4c6ceb552271fae8c6d5c780f69001d9c1756722f7f5f9431e21378c39406a64fdfbf451190038fb1d357e71f3ae9db99695d9cdffc1bfc7a3291ac4b1362251f345155410062869e300f433c2358b6c369de83d8bbc363b412cb1e798bb8c36e56531f8ad59a099b8d1f0c2de4b972c945e64f3f1afad20c1fa1dff7672a816747ed685fcf42e9458ab0b0fe6f199fd076becd9057a1acd184ec6d42063a829d8edaefe6522f160f4b6f0e2917142d0f8f497c7d9121f9a1000d6827e4fa1bd1d19e91e53baa730c2c1a369b32d36711037bbfc73fc527c7a35e30cb57265026774d9daf89e29c729da5341b0ef6b0ffd74e8c2b450f1b0f9b7bc617e0870fb4d93f462a777ffc5ae4dbf990a1437b5882ac90729088314d3f53bf7dc639b807375885fefd26a8355f9f4e9440aeb14fb13e0acc70acca7117f8c736ac1c0a75de343d9494c766d464267ee21e2fb20b46b8b0f7ac005b3683bad0bcf7ec44694550342845d01f8c9c2ac282747e276df10058a1fa7dac16d4b7521a12600051e0bd6459b9c8d15bf67c74b2b8e304eac4c885345730484815e10259519014dc8531fef78c871dd8da46213256189a871dd161d06088b20c58ae4303a1ca6a1ec6b2b838a085f968068d8a8a2b63e058ebb93fba9f2c5305901d712809c4549df652dac2e1a9883770055e6766afae2940651e9396d1061142630acc34e89fddd8be4a42ddf39834f1bcc0cc97ed7e8a00aa0d9a6c6a17829961b9f952e073fdc8e556dc1b141562f50992c4358332263e0fbed76b9c8eafe5d3f3c5c128360c58b9c52fa0fe3a177418dc3242950f885f06e483395f6f50e1e7325b78e41478d9fc1ad8075a8cb882fbca49cd05785bcfc78fa377da02019004ee66892acdf71d4621e8b57a2f7f6ebbc69cf3ee0979bf7d9d5075a64303fda2c79824edf2494c1a0995a6edde7857692d25b218538ebb091ababae04b2093e8cfaceb2986e0ea3d6c476a7a244f2b54cc27bd2483b00515e1d33372820909d674e1b4bccb384644090f0d8871edc6510be041a994cb4cb3f322649e7b1d13ed476491e94d3cf4205b60c2acd05180509c11e061f82f27453bd", 0x1000, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x100000000, 0x44200) ioctl$TIOCSBRK(r5, 0x5427) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) ioctl$SG_IO(r4, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet(0x2, 0xa, 0x6) 17:15:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84063c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) 17:15:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x1274, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x2, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1953.229199] sd 0:0:1:0: [sg0] tag#7790 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1953.238213] sd 0:0:1:0: [sg0] tag#7790 CDB: opcode=0xe5 (vendor) [ 1953.244615] sd 0:0:1:0: [sg0] tag#7790 CDB[00]: e5 bb b6 66 61 48 5f e8 40 63 c8 ea f7 20 f5 c0 [ 1953.253608] sd 0:0:1:0: [sg0] tag#7790 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1953.262571] sd 0:0:1:0: [sg0] tag#7790 CDB[20]: a0 17:15:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x1275, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1953.278728] sd 0:0:1:0: [sg0] tag#7790 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1953.287793] sd 0:0:1:0: [sg0] tag#7790 CDB: opcode=0xe5 (vendor) [ 1953.294185] sd 0:0:1:0: [sg0] tag#7790 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1953.303197] sd 0:0:1:0: [sg0] tag#7790 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1953.312192] sd 0:0:1:0: [sg0] tag#7790 CDB[20]: a0 17:15:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.apparmor\x00', &(0x7f00000000c0)=""/48, 0x30) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$SG_IO(0xffffffffffffffff, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x10, 0x2, 0x0}) 17:15:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}) 17:15:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x3, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1953.382238] sd 0:0:1:0: [sg0] tag#7790 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1953.391292] sd 0:0:1:0: [sg0] tag#7790 CDB: opcode=0xe5 (vendor) [ 1953.397521] sd 0:0:1:0: [sg0] tag#7790 CDB[00]: e5 bb b6 66 61 48 5f e8 40 63 c8 ea f7 20 f5 c0 [ 1953.406600] sd 0:0:1:0: [sg0] tag#7790 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1953.415919] sd 0:0:1:0: [sg0] tag#7790 CDB[20]: a0 17:15:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x1276, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1) ioctl$TIOCSTI(r1, 0x5412, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1953.584913] sd 0:0:1:0: [sg0] tag#7790 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1953.593841] sd 0:0:1:0: [sg0] tag#7790 CDB: opcode=0xe5 (vendor) [ 1953.600047] sd 0:0:1:0: [sg0] tag#7790 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1953.609041] sd 0:0:1:0: [sg0] tag#7790 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1953.618015] sd 0:0:1:0: [sg0] tag#7790 CDB[20]: a0 17:15:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f0000000200)="0adc1f120eaf5b023c2a20f695c4a6afce5ea73e06155b") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000240)) syz_execute_func(&(0x7f0000000080)="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") getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 17:15:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}) 17:15:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84068c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x4, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2201, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@md5={0x1, "8fa57b380cf976f6044683507b886c2e"}, 0x11, 0x2) syz_open_dev$adsp(&(0x7f0000000380)='/dev/adsp#\x00', 0xffffffff, 0x2) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x785880, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000140)={0x0}) accept4$inet(r0, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10, 0x80000) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000240)={r3, &(0x7f0000000180)=""/76}) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x2, 0x800) 17:15:41 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x40, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000480)=0xbb4a, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x10000, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000280)=""/44) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000080)="86a9d6b461dc3e49dbbeb1162600a85d4c3a2b15ee3573971aaaea8ccf4ef52ff12576aa6f775ab675cee39a055fc94abed66a03c9b469e3905842f14e6d5a31a89e321e2ea2199b21b71d685c38b8745f7607c8aa27f23597719cd8c6997f4fd121e747d3c6e4503b2f3b194b5aa5b8e4912e7dc9b2e7cb29a990144bd6f0f266e9bf71a2875252f147770fc8f4881981e14967f8e953ab99111217751914e68100e73613bdb7a58263") r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r3, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1ff, @scatter={0x2, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/148, 0x94}, {&(0x7f0000000380)=""/206, 0xce}]}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) [ 1954.185455] sd 0:0:1:0: [sg0] tag#7790 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1954.194374] sd 0:0:1:0: [sg0] tag#7790 CDB: opcode=0xe5 (vendor) [ 1954.200583] sd 0:0:1:0: [sg0] tag#7790 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1954.209573] sd 0:0:1:0: [sg0] tag#7790 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1954.218646] sd 0:0:1:0: [sg0] tag#7790 CDB[20]: a0 17:15:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2202, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 17:15:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf70af5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x5, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x7) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f00000001c0)) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f00000002c0)=0x5) syz_execute_func(&(0x7f0000000080)="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") connect$l2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x4, 0x4, 0x1}}, 0x2e) 17:15:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf710f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 17:15:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x6, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x7, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2205, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000000c0)) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000040)={0x1, 0xffffffffffffffff, 0x0, 0x200000, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x10c) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000240)) 17:15:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}) 17:15:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf721f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x8, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1955.387268] scsi_io_completion_action: 8 callbacks suppressed [ 1955.387303] sd 0:0:1:0: [sg0] tag#8107 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1955.402470] sd 0:0:1:0: [sg0] tag#8107 CDB: opcode=0xe5 (vendor) [ 1955.408689] sd 0:0:1:0: [sg0] tag#8107 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 21 f5 c0 [ 1955.417943] sd 0:0:1:0: [sg0] tag#8107 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1955.426913] sd 0:0:1:0: [sg0] tag#8107 CDB[20]: a0 [ 1955.521222] sd 0:0:1:0: [sg0] tag#8107 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1955.530055] sd 0:0:1:0: [sg0] tag#8107 CDB: opcode=0xe5 (vendor) [ 1955.536625] sd 0:0:1:0: [sg0] tag#8107 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1955.545602] sd 0:0:1:0: [sg0] tag#8107 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1955.554592] sd 0:0:1:0: [sg0] tag#8107 CDB[20]: a0 17:15:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f00000001c0)="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") r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000080)={0x5, "47ab7239b688ba4923a1d31b028d284fea66eee41733445142013c9994951722", 0x3, 0x1}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x400000, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) 17:15:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x80000, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000100)={0x0, 0xffffffff, 0xfffffffffffffffe, {0x0, 0x1c9c380}, 0x800, 0x3}) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xa3e4, 0x0, 0x0, 0x0}) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x1, 0x0) fremovexattr(r1, &(0x7f00000001c0)=@known='trusted.overlay.impure\x00') r4 = getpgid(0xffffffffffffffff) write$P9_RGETLOCK(r3, &(0x7f0000000080)={0x20, 0x37, 0x1, {0x1, 0xaa, 0x7, r4, 0x2, '/:'}}, 0x20) 17:15:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2270, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 17:15:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x48, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf723f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1956.145714] sd 0:0:1:0: [sg0] tag#8107 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1956.152056] sd 0:0:1:0: [sg0] tag#7814 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1956.154674] sd 0:0:1:0: [sg0] tag#8107 CDB: opcode=0xe5 (vendor) [ 1956.163427] sd 0:0:1:0: [sg0] tag#7814 CDB: opcode=0xe5 (vendor) [ 1956.163454] sd 0:0:1:0: [sg0] tag#7814 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1956.163487] sd 0:0:1:0: [sg0] tag#7814 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 17:15:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x4, @scatter={0x2, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001380)=""/248, 0xf8}, {&(0x7f0000001480)=""/66, 0x42}]}, 0x0, 0x0, 0x0, 0x1, 0x800, 0x0}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x40000, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000080)) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000380)=""/4096, 0x20000, 0x1000, 0x3}, 0x18) [ 1956.169662] sd 0:0:1:0: [sg0] tag#8107 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 23 f5 c0 [ 1956.175910] sd 0:0:1:0: [sg0] tag#7814 CDB[20]: a0 [ 1956.184928] sd 0:0:1:0: [sg0] tag#8107 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1956.217000] sd 0:0:1:0: [sg0] tag#8107 CDB[20]: a0 17:15:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}) 17:15:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf725f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x4) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f00000017c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001800)=0x14, 0x800) getsockname$packet(0xffffffffffffff9c, &(0x7f0000001840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001880)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1b, &(0x7f00000018c0)={@initdev, 0x0}, &(0x7f0000001900)=0x14) recvmmsg(r0, &(0x7f0000007a00)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f00000019c0)=""/253, 0xfd}, {&(0x7f0000001ac0)=""/22, 0x16}, {&(0x7f0000001b00)=""/47, 0x2f}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/206, 0xce}, {&(0x7f0000002c40)=""/100, 0x64}, {&(0x7f0000002cc0)=""/243, 0xf3}, {&(0x7f0000002dc0)=""/95, 0x5f}], 0x8, &(0x7f0000002ec0)=""/82, 0x52}, 0x100000000}, {{&(0x7f0000002f40)=@rc, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002fc0)=""/188, 0xbc}, {&(0x7f0000003080)=""/225, 0xe1}, {&(0x7f0000003180)=""/36, 0x24}], 0x3, &(0x7f0000003200)=""/68, 0x44}}, {{&(0x7f0000003280)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000003600)=[{&(0x7f0000003300)=""/122, 0x7a}, {&(0x7f0000003380)=""/201, 0xc9}, {&(0x7f0000003480)=""/106, 0x6a}, {&(0x7f0000003500)=""/55, 0x37}, {&(0x7f0000003540)=""/190, 0xbe}], 0x5}, 0x7}, {{&(0x7f0000003680)=@in, 0x80, &(0x7f0000004900)=[{&(0x7f0000003700)=""/89, 0x59}, {&(0x7f0000003780)=""/4096, 0x1000}, {&(0x7f0000004780)=""/22, 0x16}, {&(0x7f00000047c0)=""/85, 0x55}, {&(0x7f0000004840)=""/165, 0xa5}], 0x5}, 0x7f}, {{&(0x7f0000004980)=@x25, 0x80, &(0x7f0000004f00)=[{&(0x7f0000004a00)=""/206, 0xce}, {&(0x7f0000004b00)=""/66, 0x42}, {&(0x7f0000004b80)=""/38, 0x26}, {&(0x7f0000004bc0)=""/225, 0xe1}, {&(0x7f0000004cc0)=""/206, 0xce}, {&(0x7f0000004dc0)=""/3, 0x3}, {&(0x7f0000004e00)=""/183, 0xb7}, {&(0x7f0000004ec0)=""/16, 0x10}], 0x8, &(0x7f0000004f80)=""/245, 0xf5}, 0x7}, {{&(0x7f0000005080)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f00000063c0)=[{&(0x7f0000005100)=""/236, 0xec}, {&(0x7f0000005200)=""/174, 0xae}, {&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/60, 0x3c}, {&(0x7f0000006300)=""/141, 0x8d}], 0x5, &(0x7f0000006440)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000007440)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000007980)=[{&(0x7f00000074c0)=""/237, 0xed}, {&(0x7f00000075c0)=""/203, 0xcb}, {&(0x7f00000076c0)=""/6, 0x6}, {&(0x7f0000007700)=""/177, 0xb1}, {&(0x7f00000077c0)=""/99, 0x63}, {&(0x7f0000007840)=""/143, 0x8f}, {&(0x7f0000007900)=""/95, 0x5f}], 0x7}, 0x5fb5}], 0x7, 0x0, &(0x7f0000007bc0)={0x0, 0x989680}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000007cc0)={@mcast2, 0x0}, &(0x7f0000007d00)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000007d40)={'vcan0\x00', 0x0}) accept4$packet(0xffffffffffffffff, &(0x7f0000008980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000089c0)=0x14, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000008a00)={'teql0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000008b40)={{{@in6=@ipv4={[], [], @loopback}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000008c40)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000008c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000008cc0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000008d00)={'syzkaller1\x00', 0x0}) recvmmsg(r0, &(0x7f0000009180)=[{{&(0x7f0000008d40)=@hci={0x1f, 0x0}, 0x80, &(0x7f00000090c0)=[{&(0x7f0000008dc0)=""/242, 0xf2}, {&(0x7f0000008ec0)=""/190, 0xbe}, {&(0x7f0000008f80)=""/69, 0x45}, {&(0x7f0000009000)=""/168, 0xa8}], 0x4, &(0x7f0000009100)=""/96, 0x60}, 0x5}], 0x1, 0x40, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000091c0)={{{@in6, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f00000092c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000098c0)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000099c0)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000009a40)={@multicast2, @rand_addr, 0x0}, &(0x7f0000009a80)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000009ac0)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in6}}, &(0x7f0000009bc0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000009c00)={'vcan0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000009c40)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000009d40)=0xe8) accept4$packet(0xffffffffffffff9c, &(0x7f0000009d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000009dc0)=0x14, 0x80000) getsockname$packet(0xffffffffffffff9c, &(0x7f0000009e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000009e40)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000009ec0)={0x0, @initdev, @remote}, &(0x7f0000009f00)=0xc) accept4(r0, &(0x7f0000009f80)=@can={0x1d, 0x0}, &(0x7f000000a000)=0x80, 0x80800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f000000a080)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f000000a180)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f000000a1c0)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f000000a2c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000014b40)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}}}, &(0x7f0000014c40)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000014c80)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000014d80)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000014dc0)={@multicast1, @initdev, 0x0}, &(0x7f0000014e00)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000014e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000014e80)=0x14) getsockname$packet(0xffffffffffffff9c, &(0x7f0000014ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000014f00)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000015900)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000158c0)={&(0x7f0000014f40)={0x980, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x7c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x991}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0xb8, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1e9a}}}]}}, {{0x8, 0x1, r9}, {0x1a8, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x80}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x400000000}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r13}, {0x130, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r14}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r15}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x0, 0xa1, 0x2, 0x2}, {0xffffffff80000000, 0x4, 0x2, 0x1ff}]}}}]}}, {{0x8, 0x1, r18}, {0x16c, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r20}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r21}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r22}, {0x44, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r23}}}]}}, {{0x8, 0x1, r24}, {0xfc, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x686f}}, {0x8, 0x6, r25}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r26}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x58cf}}, {0x8, 0x6, r27}}}]}}, {{0x8, 0x1, r28}, {0x274, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r29}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x15}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x39, 0x9, 0x2, 0x10001}, {0x2, 0x100000001, 0x0, 0x9}, {0x5, 0x734, 0xac66, 0x3ff}]}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r30}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r31}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r32}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r33}}}]}}]}, 0x980}, 0x1, 0x0, 0x0, 0x4000}, 0x24004800) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r34 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x311000, 0x0) ioctl$EVIOCGNAME(r34, 0x80404506, &(0x7f0000000080)=""/193) 17:15:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2271, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1956.434948] sd 0:0:1:0: [sg0] tag#7855 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1956.444093] sd 0:0:1:0: [sg0] tag#7855 CDB: opcode=0xe5 (vendor) [ 1956.450307] sd 0:0:1:0: [sg0] tag#7855 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 25 f5 c0 [ 1956.459302] sd 0:0:1:0: [sg0] tag#7855 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1956.468273] sd 0:0:1:0: [sg0] tag#7855 CDB[20]: a0 17:15:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}) 17:15:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', &(0x7f0000000200)=""/30, 0x1e) syz_execute_func(&(0x7f0000000080)="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") 17:15:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}) 17:15:44 executing program 2: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@empty, 0x42, r1}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r3, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x4c, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2272, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf72ff5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1957.171570] sd 0:0:1:0: [sg0] tag#7856 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1957.180431] sd 0:0:1:0: [sg0] tag#7856 CDB: opcode=0xe5 (vendor) [ 1957.186759] sd 0:0:1:0: [sg0] tag#7856 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 2f f5 c0 [ 1957.195803] sd 0:0:1:0: [sg0] tag#7856 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1957.204778] sd 0:0:1:0: [sg0] tag#7856 CDB[20]: a0 [ 1957.210931] sd 0:0:1:0: [sg0] tag#8107 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK 17:15:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x4400, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa0}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="02032dbd7000fcdbdf25050000000c0003000800030002000000080005008e6b000008000400000000001c000101080008000c00000008000900070000000800010000000000080005000800000053cfe3e11abbb449249d248b3072a6a9e657b68005d4"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x80) getsockname$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000140)=0x1c) 17:15:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}) [ 1957.219677] sd 0:0:1:0: [sg0] tag#8107 CDB: opcode=0xe5 (vendor) [ 1957.226071] sd 0:0:1:0: [sg0] tag#8107 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1957.235197] sd 0:0:1:0: [sg0] tag#8107 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1957.244189] sd 0:0:1:0: [sg0] tag#8107 CDB[20]: a0 17:15:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf744f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) 17:15:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x521002, 0x0) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000080)={0x4, 0x3f, 0x2, 0x3f, 0x7, 0x16da9c06}) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1957.394758] sd 0:0:1:0: [sg0] tag#8114 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1957.403839] sd 0:0:1:0: [sg0] tag#8114 CDB: opcode=0xe5 (vendor) [ 1957.410052] sd 0:0:1:0: [sg0] tag#8114 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 44 f5 c0 [ 1957.419111] sd 0:0:1:0: [sg0] tag#8114 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1957.428153] sd 0:0:1:0: [sg0] tag#8114 CDB[20]: a0 17:15:45 executing program 5: r0 = accept$ax25(0xffffffffffffff9c, &(0x7f00000001c0)={{}, [@netrom, @netrom, @bcast, @netrom, @remote, @rose, @default, @netrom]}, &(0x7f0000000040)=0x48) r1 = getpgrp(0x0) fcntl$lock(r0, 0x27, &(0x7f0000000240)={0x0, 0x3, 0x1, 0x3f800000000, r1}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000080)="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") 17:15:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x5d, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2276, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 17:15:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000080)='F/:)wlan0+\x00', &(0x7f00000000c0)='/dev/sg#\x00', &(0x7f0000000100)='keyringppp1+eth1\'-:-\x00', &(0x7f0000000140)='/dev/sg#\x00', &(0x7f0000000180)='/@\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='nodevvmnet1\x00', &(0x7f0000000280)='.{\x00', &(0x7f00000002c0)='/dev/sg#\x00'], &(0x7f0000000400)) 17:15:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf760f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1958.103920] sd 0:0:1:0: [sg0] tag#8114 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1958.112958] sd 0:0:1:0: [sg0] tag#8114 CDB: opcode=0xe5 (vendor) [ 1958.119172] sd 0:0:1:0: [sg0] tag#8114 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1958.128166] sd 0:0:1:0: [sg0] tag#8114 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1958.137168] sd 0:0:1:0: [sg0] tag#8114 CDB[20]: a0 [ 1958.144121] sd 0:0:1:0: [sg0] tag#8114 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK 17:15:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 17:15:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2279, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1958.154450] sd 0:0:1:0: [sg0] tag#8114 CDB: opcode=0xe5 (vendor) [ 1958.160874] sd 0:0:1:0: [sg0] tag#8114 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 60 f5 c0 [ 1958.169790] sd 0:0:1:0: [sg0] tag#8114 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1958.179564] sd 0:0:1:0: [sg0] tag#8114 CDB[20]: a0 17:15:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = msgget$private(0x0, 0x10) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000040)=""/104) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x60, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf761f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 17:15:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x1fd, &(0x7f0000000380)={@random="08a06249d9c0", @broadcast, [{[{0x9100, 0x9, 0x10000000000000}], {0x8100, 0xe81f, 0xfffffffffffffff9, 0x1}}], {@ipv6={0x86dd, {0x3ff, 0x6, "9cf243", 0x1bf, 0x3b, 0xffff, @mcast2, @rand_addr="9ac34e4c851baede02c5b43a7c0ceb65", {[@srh={0x3f, 0x4, 0x4, 0x2, 0x8, 0x8, 0xff, [@local, @rand_addr="62706390241a004d07ad65eb4e82407d"]}, @dstopts={0x33, 0x9, [], [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x5, 0x3d, "269690edd764441a256f42a5e82d443e8a17f669a6022142518f5e32728adc73440f1c7f5233b45b00bdc5fc52af12c5c918ee6dca3d5ad397f44e19cd"}, @jumbo]}, @hopopts={0x6c, 0x0, [], [@pad1]}, @dstopts={0x16}, @routing={0x2e, 0x6, 0x0, 0x7, 0x0, [@dev={0xfe, 0x80, [], 0x1e}, @local, @dev={0xfe, 0x80, [], 0x25}]}, @dstopts={0x3c, 0xd, [], [@hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x50, {0x7, 0x12, 0x0, 0x0, [0xfffffffffffffe00, 0x8, 0x8, 0x4, 0xffff, 0x8, 0x7ff, 0x80000000, 0x46a0]}}, @ra={0x5, 0x2, 0x3}]}, @srh={0xc, 0xa, 0x4, 0x5, 0x8000, 0x28, 0x800000000000, [@rand_addr="93a066427b8b48685c6aac12399e5770", @mcast2, @rand_addr="fb48106c66a784dbabb719320b64a9b5", @mcast2, @mcast2]}], @tipc=@payload_direct={{{{0x27, 0x0, 0xfffffffffffffff8, 0x5, 0x67, 0x8, 0x1, 0x2, 0x0, 0x0, 0x1, 0x9, 0x3, 0x3, 0x3, 0x3ff, 0x4, 0x4e22, 0x4e20}, 0x2, 0x4}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") fstat(0xffffffffffffffff, &(0x7f00000000c0)) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000080)) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x4010, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x20000) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x227a, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x68, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf763f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) ioctl(r0, 0x1000008912, &(0x7f0000000640)="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") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40004, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) mq_notify(r1, &(0x7f00000001c0)={0x0, 0x26, 0x0, @tid=r2}) syz_execute_func(&(0x7f0000000080)="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") 17:15:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 17:15:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x6c, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x227b, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf768f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 17:15:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000080)=0x10) 17:15:46 executing program 5: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f00000001c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = dup3(r0, r1, 0x80000) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e22, 0x6b, @mcast1, 0x1}}, [0xfffffffffffffff7, 0x2, 0x5, 0x10001, 0x1, 0xef, 0x9, 0x1ff, 0x1, 0x80, 0x0, 0x8000, 0x200, 0xffffffff, 0x4]}, &(0x7f0000000500)=0x100) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000540)={r3, 0x5, 0x3}, &(0x7f0000000580)=0x8) utimes(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000300)={0x0, @speck128}) syz_execute_func(&(0x7f0000000080)="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") r4 = syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0x1, 0x82001) r5 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x7b, 0x40440) sendto$inet(r5, &(0x7f0000000380)="200c0cc660a08125baa80a17d93c6abd65283c37286dad8f4fd40183df754b6ee90d", 0x22, 0x801, &(0x7f00000003c0)={0x2, 0x4e21, @multicast2}, 0x10) recvfrom$netrom(r4, &(0x7f00000002c0)=""/8, 0x8, 0x40000002, 0x0, 0x0) 17:15:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x70, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x227c, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}) 17:15:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c078b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x100, 0x0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000200)={0xa, 0x3, 0x8000, 0x9}, 0xa) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000240)={0x7, "051e62636417cc8b799582784e257c9c57763c5df5c6c624ce783872c5b4bbf0", 0x0, 0x1}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'dummy0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x29}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0xc800) 17:15:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) keyctl$session_to_parent(0x12) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000080)) 17:15:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x74, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x227d, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}) 17:15:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl(r1, 0x1000000000, &(0x7f0000000040)="7f3a4171232f0e6a231c9f8c021bae0234b0735b4a29b4b47a73fc2cd3aaa25c0d4f786f6aae92d6dbcae42768efcacb4f865fb31f497034a3aff757bf20a679419e6f6f13863e3c7e7a055fbe1e4fa6ac25") ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c0c4b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x6, &(0x7f0000000000)="0adc1f123c123f319bd070") 17:15:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x227e, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x7a, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9093c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl(r1, 0x4, &(0x7f0000000040)="41c2ba5fa5d6d07d3bfbdd1a9643f903798233589460fa8c3d453d8cfd47936a3ae489704dd7fefa9602f0e61a29b530445fd157960ccd7e089232131881484444d84e62c55638eaa740b06842eb54f0ae75eb68e19e8b077d4db05c1d105f804ce30e50bc2e0e959b4408e84ee45b2f3214a10f25867f0457862dbc99efe6f767d114f97e4235f622ebd054834e3afdfb46074cb18ab9dbfea689d89f25fa59130c7fe0cc892a777378bf9e05c7260740832bd7fead36e56290be62f6fffa2f55e917462a4efb0350ae0de9b3332ae446e9c51964347853fdfbb457a17a05274f13a76e81b6838977f485160ffd9e") r2 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x3, 0x2) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000240)) r3 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x7f, 0x40000) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000180)={0x1, "00dbad5998a8945aeafd4e875eae37aa3c7e05ca9bb4ff0c0cc5db9cad61d4fb", 0x2, 0x1}) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000280)) 17:15:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 17:15:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x300, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x227f, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:46 executing program 5: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000040)={0x7, {0x8, 0x5, 0x8001, 0x4}, {0xffffffffffffff80, 0x9, 0x7, 0x7}, {0x9}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20ncci\x00', 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) syz_open_dev$evdev(&(0x7f0000000600)='/dev/input/event#\x00', 0x9, 0x204004) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x106, 0x5}}, 0x20) lsetxattr$trusted_overlay_redirect(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='trusted.overlay.redirect\x00', &(0x7f00000004c0)='./file0\x00', 0x8, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='bic\x00', 0x4) syz_execute_func(&(0x7f00000001c0)="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") ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000500)={r2, 0xa62, 0x3, r2}) 17:15:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) 17:15:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2282, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 17:15:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x500, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9253c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f0000000080)="0adc1f123c123f319be402") r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x2, 0x400000000000) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2283, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 17:15:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x600, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9613c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f319bd07000000000") r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x101000) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000040)={0x0, 0x0, 0x240, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1960.414861] scsi_io_completion_action: 17 callbacks suppressed [ 1960.414895] sd 0:0:1:0: [sg0] tag#28 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1960.429708] sd 0:0:1:0: [sg0] tag#28 CDB: opcode=0xe5 (vendor) [ 1960.435862] sd 0:0:1:0: [sg0] tag#28 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1960.444785] sd 0:0:1:0: [sg0] tag#28 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1960.453602] sd 0:0:1:0: [sg0] tag#28 CDB[20]: a0 [ 1960.468521] sd 0:0:1:0: [sg0] tag#28 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1960.477254] sd 0:0:1:0: [sg0] tag#28 CDB: opcode=0xe5 (vendor) [ 1960.483459] sd 0:0:1:0: [sg0] tag#28 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1960.492267] sd 0:0:1:0: [sg0] tag#28 CDB[10]: 94 b9 61 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1960.501108] sd 0:0:1:0: [sg0] tag#28 CDB[20]: a0 [ 1960.556797] sd 0:0:1:0: [sg0] tag#28 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1960.565673] sd 0:0:1:0: [sg0] tag#28 CDB: opcode=0xe5 (vendor) [ 1960.571789] sd 0:0:1:0: [sg0] tag#28 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1960.580513] sd 0:0:1:0: [sg0] tag#28 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1960.589313] sd 0:0:1:0: [sg0] tag#28 CDB[20]: a0 [ 1960.598017] sd 0:0:1:0: [sg0] tag#28 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1960.606767] sd 0:0:1:0: [sg0] tag#28 CDB: opcode=0xe5 (vendor) [ 1960.612881] sd 0:0:1:0: [sg0] tag#28 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1960.621804] sd 0:0:1:0: [sg0] tag#28 CDB[10]: 94 b9 61 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1960.630533] sd 0:0:1:0: [sg0] tag#28 CDB[20]: a0 17:15:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCNXCL(r0, 0x540d) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000080)="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") r1 = syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x2, 0x400100) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000001c0)={0x3, 0xe5, 0x88c, 0x4}, 0x8) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000240)) 17:15:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) 17:15:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9633c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x700, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000013c0)={0x0, 0xfffffffffffffffd, 0x1000, 0x0, @scatter={0x2, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/194, 0xc2}, {&(0x7f0000000140)=""/109, 0x6d}]}, &(0x7f0000000380)="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", &(0x7f0000000240)=""/171, 0x5, 0x2, 0x1, &(0x7f0000001380)}) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1960.831032] sd 0:0:1:0: [sg0] tag#7892 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1960.839875] sd 0:0:1:0: [sg0] tag#7892 CDB: opcode=0xe5 (vendor) [ 1960.846363] sd 0:0:1:0: [sg0] tag#7892 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1960.855352] sd 0:0:1:0: [sg0] tag#7892 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1960.862372] sd 0:0:1:0: [sg0] tag#28 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1960.864330] sd 0:0:1:0: [sg0] tag#7892 CDB[20]: a0 17:15:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}) 17:15:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1960.872951] sd 0:0:1:0: [sg0] tag#28 CDB: opcode=0xe5 (vendor) [ 1960.883968] sd 0:0:1:0: [sg0] tag#28 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1960.892785] sd 0:0:1:0: [sg0] tag#28 CDB[10]: 94 b9 63 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1960.901609] sd 0:0:1:0: [sg0] tag#28 CDB[20]: a0 17:15:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)="f98a4056e2c4b2364f2f5842d011b279e5c3283eda4c8da2c4a61ce00d20ab151655ac7efd0cedba76ee43e86e03bd8c35ce96b74bd295565eccd3d7e360953f903ba04d5d5540f6547a3449b87a7ae6890909f08f9d67b5e8dd472216c32799c7716747a3700d2938b9af815f92c8bd88cb656fff23a4fd71cdadf3470bde7b70afa38964a9f6856aada06915506813c95399d5729e57da29ced0104d4fa1c4d5062cc9ad927008d3aa83facbb58ff2c6a7d125cd9979e4a541de96c507cb7e092d0b0cc36a712906f8a07025869249663d44e7a40bd48a18e803301ae199a62da9ddeb973904d811a971981a1e62328541499c88cb", 0xf6, r1}, 0x68) r2 = openat(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', 0x840, 0x80) fcntl$setpipe(r0, 0x407, 0x1000203cf) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f00000007c0)={0x0, 0xc}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000840)={r3, 0x7f}, &(0x7f0000000880)=0x8) 17:15:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b953097ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}) 17:15:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2287, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1961.066387] sd 0:0:1:0: [sg0] tag#28 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1961.075122] sd 0:0:1:0: [sg0] tag#28 CDB: opcode=0xe5 (vendor) [ 1961.081417] sd 0:0:1:0: [sg0] tag#28 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1961.090165] sd 0:0:1:0: [sg0] tag#28 CDB[10]: 94 b9 53 09 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1961.099007] sd 0:0:1:0: [sg0] tag#28 CDB[20]: a0 17:15:48 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) getpeername$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x3) ioctl$SG_IO(r2, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x1f00, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2288, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b953447ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) fchdir(r1) linkat(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000200)='./file0\x00', 0x1400) syz_execute_func(&(0x7f0000000240)="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") 17:15:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) [ 1961.813628] sd 0:0:1:0: [sg0] tag#28 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1961.817919] sd 0:0:1:0: [sg0] tag#7905 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1961.823633] sd 0:0:1:0: [sg0] tag#28 CDB: opcode=0xe5 (vendor) [ 1961.832574] sd 0:0:1:0: [sg0] tag#7905 CDB: opcode=0xe5 (vendor) [ 1961.838557] sd 0:0:1:0: [sg0] tag#28 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1961.844871] sd 0:0:1:0: [sg0] tag#7905 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 17:15:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2289, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x92d2, &(0x7f0000000140)="000000000000000000000200") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'caif0\x00', 0x8fd}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0xfffffffffffffffb, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x80000000) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) [ 1961.853662] sd 0:0:1:0: [sg0] tag#28 CDB[10]: 94 b9 53 44 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1961.862609] sd 0:0:1:0: [sg0] tag#7905 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1961.871384] sd 0:0:1:0: [sg0] tag#28 CDB[20]: a0 [ 1961.885122] sd 0:0:1:0: [sg0] tag#7905 CDB[20]: a0 17:15:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x2000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b953617ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:49 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0xf0, r4, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x2a}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x401}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x67}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsf0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7c11}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x800}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x40}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000001}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) ioctl$SG_IO(r2, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x4b47, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1962.117212] sd 0:0:1:0: [sg0] tag#7908 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1962.126179] sd 0:0:1:0: [sg0] tag#7908 CDB: opcode=0xe5 (vendor) [ 1962.132652] sd 0:0:1:0: [sg0] tag#7908 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1962.141631] sd 0:0:1:0: [sg0] tag#7908 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1962.150530] sd 0:0:1:0: [sg0] tag#7908 CDB[20]: a0 17:15:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}) 17:15:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b953637ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1962.251500] audit: type=1400 audit(1556903749.318:148): avc: denied { setattr } for pid=5143 comm="syz-executor.2" name="NETLINK" dev="sockfs" ino=303117 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 17:15:49 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x20000, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000380)={[], 0x1f, 0x0, 0xfff, 0x0, 0x10000, 0x1, 0x0, [], 0x8919}) sendmsg$xdp(r0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, 0x4, r1, 0x16}, 0x10, &(0x7f0000000980), 0x0, 0x0, 0x0, 0x40000}, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r3, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x4b49, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a544eced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 17:15:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x4800, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000080)) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) 17:15:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000580)="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") 17:15:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x4c00, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') ioctl$SG_IO(r0, 0x2285, &(0x7f0000000480)={0x53, 0x0, 0xa4, 0x7, @scatter={0x2, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/215, 0xd7}, {&(0x7f0000000240)=""/70, 0x46}]}, &(0x7f0000000380)="5d0f9e11cc039511f3fc0b82bc97c0f69487fe69f5c51af2b6a78ebc80412a01baa06be70d97cc586fbdfdcec4916e30ad683a0b15a0f0f47ddfa4956d826d978ad4a835687d4ec0d2bcc0ace3d8924e9dbbad8bb5bf52ac54336b1cadae48fd8e83b7282b8a3de1aa2421e60ef358de3aa0e67f7400536092f65a6bd00d3f3fd85f119187cf993f25fbaf5db887e105bcfd8633d2f31bfeb7376e514146ba99720111ae", &(0x7f00000002c0)=""/44, 0xffff, 0x11, 0x1, &(0x7f0000000440)}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000000500)='/dev/input/mice\x00', 0x0, 0x4400) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40000, 0x0) 17:15:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a561eced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x5382, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}) 17:15:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x410400, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f00000001c0)={{0x0, @name="5ba84a288d6e80dd8b0895d3a0779686237a559c953be8f9b3723dbf3bae1329"}, 0x8, 0x10000, 0x401}) syz_execute_func(&(0x7f0000000080)="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") 17:15:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x5d00, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a563eced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}) 17:15:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x5385, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x5, &(0x7f0000000080)="0a03000c3c00123f11092a614d05c281ba03000000000000002e2ad75d5ec3b1f72e93bbe2d453948a7c96f98ea7a5b6bf4058baab2d2013395d25ec03151f57a3c698b2d3c78801aa414fc6ed650813082d134a1b6e00000000000000") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x6000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x5386, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a568eced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}) 17:15:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f00000000c0)) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x4, 0x0) ioctl$SG_IO(r2, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x6800, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000080)="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") r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000001c0), 0x1000) 17:15:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x541b, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}) 17:15:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced449d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x1, 0x1fe) write$UHID_INPUT(r2, &(0x7f0000000380)={0x8, "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", 0x1000}, 0x1006) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 17:15:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x6c00, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced619d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x7000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) 17:15:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x5421, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:51 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x2, 0x4000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x404, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x574c}]}, 0x1c}}, 0x20044881) ioctl$SG_IO(r2, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced639d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x5450, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x7400, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 17:15:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2275, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:52 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000080)="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") modify_ldt$read_default(0x2, &(0x7f00000001c0)=""/224, 0xe0) 17:15:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced689d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 17:15:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x7a00, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:52 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000001c0)=""/113) 17:15:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x5451, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d0a74ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x5452, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 17:15:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x200000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d0f74ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1965.489968] scsi_io_completion_action: 20 callbacks suppressed [ 1965.490004] sd 0:0:1:0: [sg0] tag#56 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1965.504780] sd 0:0:1:0: [sg0] tag#56 CDB: opcode=0xe5 (vendor) [ 1965.510878] sd 0:0:1:0: [sg0] tag#56 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1965.519604] sd 0:0:1:0: [sg0] tag#56 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1965.528390] sd 0:0:1:0: [sg0] tag#56 CDB[20]: a0 17:15:52 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) sendto(0xffffffffffffffff, &(0x7f0000000200)='[', 0x1, 0x90, 0x0, 0x0) [ 1965.539208] sd 0:0:1:0: [sg0] tag#56 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1965.548165] sd 0:0:1:0: [sg0] tag#56 CDB: opcode=0xe5 (vendor) [ 1965.554273] sd 0:0:1:0: [sg0] tag#56 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1965.563049] sd 0:0:1:0: [sg0] tag#56 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 0f 74 ba 86 [ 1965.571836] sd 0:0:1:0: [sg0] tag#56 CDB[20]: a0 [ 1965.710509] sd 0:0:1:0: [sg0] tag#56 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1965.721892] sd 0:0:1:0: [sg0] tag#56 CDB: opcode=0xe5 (vendor) [ 1965.727935] sd 0:0:1:0: [sg0] tag#56 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1965.736755] sd 0:0:1:0: [sg0] tag#56 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 0f 74 ba 86 [ 1965.745562] sd 0:0:1:0: [sg0] tag#56 CDB[20]: a0 17:15:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 17:15:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x5460, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d6174ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x1000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:53 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x2000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000001c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x100000890f, &(0x7f0000000040)="0adc1f123c123f319bd070") write$FUSE_STATFS(r0, &(0x7f0000000200)={0x60, 0x0, 0x6, {{0x6, 0xffffffffffffff01, 0x6, 0x101, 0x6, 0x536, 0x6, 0x4}}}, 0x60) syz_execute_func(&(0x7f0000000080)="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") 17:15:53 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) accept4(r0, 0x0, 0x0, 0x0) [ 1965.970572] sd 0:0:1:0: [sg0] tag#72 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1965.979444] sd 0:0:1:0: [sg0] tag#72 CDB: opcode=0xe5 (vendor) [ 1965.985624] sd 0:0:1:0: [sg0] tag#72 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1965.994481] sd 0:0:1:0: [sg0] tag#72 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1966.003312] sd 0:0:1:0: [sg0] tag#72 CDB[20]: a0 17:15:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) [ 1966.017492] sd 0:0:1:0: [sg0] tag#72 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1966.026929] sd 0:0:1:0: [sg0] tag#72 CDB: opcode=0xe5 (vendor) [ 1966.033292] sd 0:0:1:0: [sg0] tag#72 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1966.042122] sd 0:0:1:0: [sg0] tag#72 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 61 74 ba 86 [ 1966.050997] sd 0:0:1:0: [sg0] tag#72 CDB[20]: a0 17:15:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x40049409, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d6374ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 17:15:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}) 17:15:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x2000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x40086602, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1966.279877] sd 0:0:1:0: [sg0] tag#56 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1966.288609] sd 0:0:1:0: [sg0] tag#56 CDB: opcode=0xe5 (vendor) [ 1966.294758] sd 0:0:1:0: [sg0] tag#56 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1966.303552] sd 0:0:1:0: [sg0] tag#56 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 63 74 ba 86 [ 1966.312406] sd 0:0:1:0: [sg0] tag#56 CDB[20]: a0 17:15:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}) [ 1966.386901] sd 0:0:1:0: [sg0] tag#56 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1966.395773] sd 0:0:1:0: [sg0] tag#56 CDB: opcode=0xe5 (vendor) [ 1966.401913] sd 0:0:1:0: [sg0] tag#56 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1966.410820] sd 0:0:1:0: [sg0] tag#56 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1966.419555] sd 0:0:1:0: [sg0] tag#56 CDB[20]: a0 17:15:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x40087602, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:53 executing program 2: syz_execute_func(&(0x7f0000000600)="350f7e45ffd52b98cd801b69e4e466a6660f38de3e5c62d1d9d9dcdcc40fc4e251a6fa385f5bf98021a2b93db93d8fe9589b26e30cc4fa15b9cc9cb25bedab1ced7fd97bdbc4c1f92b5d002636de9b490302c02650c4e37d190d0070a53a1735c4c181e81a8f08eeeee2000080c4c3dd6d680748f30f1af1360fb05bf4660fd0950000000050f6b8e1000000129f9b9f9b0000d1ea11eff265dc5f813ef0f65588e3d0aa03180000363ef867660f1281af5066030faee42c240f5e5bf4b647024702d172f3082529292d9248161600000f004affc401fe5ff6e3df0f7dc39c03a403a609f1dc00082611") 17:15:53 executing program 5: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x840, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x214, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe7ea}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffffb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x46}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2f6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}]}]}, 0x214}}, 0x4000080) getsockname$llc(r1, &(0x7f0000000580)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000005c0)=0x10) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_execute_func(&(0x7f0000000080)="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") 17:15:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x4020940d, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d460aba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 17:15:53 executing program 2: syz_execute_func(&(0x7f00000000c0)="350f7e45ffd52b98cd801b69e4e46666660f38de3e5c62d1d9d9dcdcc40f01db385f5bf98021a2b93db93d8fe9589b26e30cc4fa15b9cc9cb23cedab1ced7fd97bdb3c902636de9b490302c02650c4e37d190d0070a53a1735c4c181e81a8f08eeeee2000080c4c3dd6d680748f30f1af1360fb05bf4660fd0950000000050c4e27d197085129f9b9f9b0000d1ea11eff265dc5f81eaebb30000c4e1e3d0aa03180000363ef80f9966030faee42c24f7d3b647024702d172f3082529292d9248161600000f004aff6466660f62f5fe5ff6e3df0f7dc39c9c000011") 17:15:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x3000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:54 executing program 2 (fault-call:3 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) [ 1966.958146] sd 0:0:1:0: [sg0] tag#104 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1966.966988] sd 0:0:1:0: [sg0] tag#104 CDB: opcode=0xe5 (vendor) [ 1966.973373] sd 0:0:1:0: [sg0] tag#104 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1966.982275] sd 0:0:1:0: [sg0] tag#104 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1966.991167] sd 0:0:1:0: [sg0] tag#104 CDB[20]: a0 17:15:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) [ 1967.006566] sd 0:0:1:0: [sg0] tag#56 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1967.015564] sd 0:0:1:0: [sg0] tag#56 CDB: opcode=0xe5 (vendor) [ 1967.021811] sd 0:0:1:0: [sg0] tag#56 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1967.030545] sd 0:0:1:0: [sg0] tag#56 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 0a ba 86 [ 1967.039364] sd 0:0:1:0: [sg0] tag#56 CDB[20]: a0 17:15:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x80086601, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1967.123041] FAULT_INJECTION: forcing a failure. [ 1967.123041] name failslab, interval 1, probability 0, space 0, times 0 [ 1967.171704] CPU: 0 PID: 5451 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1967.178639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1967.188024] Call Trace: [ 1967.190667] dump_stack+0x172/0x1f0 [ 1967.194360] should_fail.cold+0xa/0x1b [ 1967.198303] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1967.203462] ? lock_downgrade+0x810/0x810 [ 1967.207649] ? ___might_sleep+0x163/0x280 [ 1967.211844] __should_failslab+0x121/0x190 [ 1967.216116] should_failslab+0x9/0x14 [ 1967.219948] __kmalloc+0x2e5/0x750 [ 1967.223595] ? mon_bin_ioctl+0x48e/0xc80 [ 1967.227698] mon_bin_ioctl+0x48e/0xc80 [ 1967.231636] ? mon_bin_get_event+0x450/0x450 [ 1967.236074] ? __fget+0x340/0x540 [ 1967.239583] ? ___might_sleep+0x163/0x280 [ 1967.243780] ? __might_sleep+0x95/0x190 [ 1967.247792] ? mon_bin_get_event+0x450/0x450 [ 1967.252255] do_vfs_ioctl+0xd6e/0x1390 [ 1967.256189] ? selinux_file_ioctl+0x46f/0x5e0 [ 1967.260731] ? selinux_file_ioctl+0x125/0x5e0 [ 1967.265271] ? ioctl_preallocate+0x210/0x210 [ 1967.269730] ? selinux_file_mprotect+0x620/0x620 [ 1967.274711] ? iterate_fd+0x360/0x360 [ 1967.278606] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1967.284372] ? fput+0x128/0x1a0 [ 1967.287702] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1967.293298] ? security_file_ioctl+0x93/0xc0 [ 1967.297763] ksys_ioctl+0xab/0xd0 [ 1967.301254] __x64_sys_ioctl+0x73/0xb0 [ 1967.305184] do_syscall_64+0x103/0x610 [ 1967.309119] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1967.314356] RIP: 0033:0x458da9 [ 1967.317584] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1967.336517] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1967.344274] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1967.351582] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1967.358910] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 17:15:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x4000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4625ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x80087601, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1967.366214] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1967.373518] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 [ 1967.423428] sd 0:0:1:0: [sg0] tag#56 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1967.432296] sd 0:0:1:0: [sg0] tag#56 CDB: opcode=0xe5 (vendor) [ 1967.438360] sd 0:0:1:0: [sg0] tag#56 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1967.447181] sd 0:0:1:0: [sg0] tag#56 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1967.456132] sd 0:0:1:0: [sg0] tag#56 CDB[20]: a0 17:15:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0xc0045878, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 17:15:55 executing program 2 (fault-call:3 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:15:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4698ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = fcntl$dupfd(r0, 0x406, r0) r2 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@initdev}}, &(0x7f0000000300)=0xe8) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r3, &(0x7f0000000700)={0x5c, 0x7d, 0x1, {{0x0, 0x43, 0x4, 0xfffffffffffffff8, {0x80, 0x0, 0x7}, 0x10000, 0x7, 0x7, 0x100, 0x5, 'IPVS\x00', 0x1, '*', 0x5, 'IPVS\x00', 0x5, 'IPVS\x00'}, 0x4, 'bdev', r4, r5, r6}}, 0x5c) write(r2, &(0x7f0000f9afda)="26000000130047f1eb14c1f8000022ff001000e313000000010000000000000006000300054b", 0x26) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000fc65aa1fee8bb661d16fd0210cdb95f6e6086db1cef007db9d7423577ee9c54bfe4b59666c28ce3a8c59bf0a1cf8c70f910d808ef0af5daca54800205e548fd57a231963", @ANYRES16=r7, @ANYBLOB="00042bbd7000fcdbdf251000000008000600070000000c00020008000700040000002c00020008000500070000000800080004000000080002004e22000008000900090000000800030005000000"], 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000010) getpeername$unix(r1, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) userfaultfd(0x80800) syz_execute_func(&(0x7f0000000080)="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") 17:15:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x5000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x6000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) 17:15:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0xc0045878, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x2, 0x0, 0x0, 0x0}) [ 1968.095897] FAULT_INJECTION: forcing a failure. [ 1968.095897] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1968.204279] CPU: 0 PID: 5498 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1968.211202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1968.220594] Call Trace: [ 1968.220629] dump_stack+0x172/0x1f0 [ 1968.226888] should_fail.cold+0xa/0x1b [ 1968.230818] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1968.235946] ? ___might_sleep+0x163/0x280 [ 1968.235967] ? __might_sleep+0x95/0x190 [ 1968.235994] __alloc_pages_nodemask+0x1ee/0x760 [ 1968.248856] ? fs_reclaim_acquire+0x20/0x20 [ 1968.253220] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1968.258794] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1968.263950] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1968.269533] alloc_pages_current+0x107/0x210 [ 1968.273986] get_zeroed_page+0x14/0x50 [ 1968.278686] mon_alloc_buff+0xc2/0x190 [ 1968.282610] ? mon_bin_ioctl+0x48e/0xc80 [ 1968.286706] mon_bin_ioctl+0x4ad/0xc80 [ 1968.290636] ? mon_bin_get_event+0x450/0x450 [ 1968.295074] ? __fget+0x340/0x540 [ 1968.298559] ? ___might_sleep+0x163/0x280 [ 1968.302742] ? __might_sleep+0x95/0x190 [ 1968.306755] ? mon_bin_get_event+0x450/0x450 [ 1968.311191] do_vfs_ioctl+0xd6e/0x1390 [ 1968.315116] ? selinux_file_ioctl+0x46f/0x5e0 [ 1968.319642] ? selinux_file_ioctl+0x125/0x5e0 [ 1968.324176] ? ioctl_preallocate+0x210/0x210 [ 1968.328630] ? selinux_file_mprotect+0x620/0x620 [ 1968.333423] ? iterate_fd+0x360/0x360 [ 1968.337258] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1968.337275] ? fput+0x128/0x1a0 [ 1968.337300] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1968.351713] ? security_file_ioctl+0x93/0xc0 [ 1968.351745] ksys_ioctl+0xab/0xd0 [ 1968.351767] __x64_sys_ioctl+0x73/0xb0 [ 1968.351787] do_syscall_64+0x103/0x610 [ 1968.351811] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1968.372702] RIP: 0033:0x458da9 [ 1968.375954] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1968.394975] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:15:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0xc0189436, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}) 17:15:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000080)="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") r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x80000000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)=0xe0) 17:15:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0xc020660b, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1968.402739] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1968.410039] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1968.417545] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1968.424845] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1968.432143] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:15:55 executing program 2 (fault-call:3 fault-nth:2): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:15:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x7000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0xc0481273, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}) 17:15:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x3, 0x0, 0x0, 0x0}) 17:15:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 17:15:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x8000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x25, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x4, 0x0, 0x0, 0x0}) 17:15:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0xfffffff, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1968.994843] FAULT_INJECTION: forcing a failure. [ 1968.994843] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1969.008120] CPU: 1 PID: 5568 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1969.015013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1969.024424] Call Trace: [ 1969.027058] dump_stack+0x172/0x1f0 [ 1969.030729] should_fail.cold+0xa/0x1b [ 1969.034663] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1969.039815] ? ___might_sleep+0x163/0x280 [ 1969.044002] ? __might_sleep+0x95/0x190 [ 1969.048012] __alloc_pages_nodemask+0x1ee/0x760 [ 1969.052710] ? fs_reclaim_acquire+0x20/0x20 [ 1969.057072] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1969.062653] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1969.067720] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1969.073303] alloc_pages_current+0x107/0x210 [ 1969.077768] get_zeroed_page+0x14/0x50 [ 1969.081687] mon_alloc_buff+0xc2/0x190 [ 1969.085598] ? mon_bin_ioctl+0x48e/0xc80 [ 1969.089685] mon_bin_ioctl+0x4ad/0xc80 [ 1969.093609] ? mon_bin_get_event+0x450/0x450 [ 1969.098050] ? __fget+0x340/0x540 [ 1969.101539] ? ___might_sleep+0x163/0x280 [ 1969.105715] ? __might_sleep+0x95/0x190 [ 1969.109719] ? mon_bin_get_event+0x450/0x450 [ 1969.114171] do_vfs_ioctl+0xd6e/0x1390 [ 1969.118102] ? selinux_file_ioctl+0x46f/0x5e0 [ 1969.122629] ? selinux_file_ioctl+0x125/0x5e0 [ 1969.127156] ? ioctl_preallocate+0x210/0x210 [ 1969.131605] ? selinux_file_mprotect+0x620/0x620 [ 1969.136424] ? iterate_fd+0x360/0x360 [ 1969.140280] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1969.145867] ? fput+0x128/0x1a0 [ 1969.149189] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1969.154780] ? security_file_ioctl+0x93/0xc0 [ 1969.159271] ksys_ioctl+0xab/0xd0 [ 1969.162888] __x64_sys_ioctl+0x73/0xb0 [ 1969.166804] do_syscall_64+0x103/0x610 [ 1969.170726] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1969.175975] RIP: 0033:0x458da9 [ 1969.179196] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1969.198131] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1969.205883] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1969.213181] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1969.220488] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1969.227789] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1969.235094] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:15:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = accept4(r0, &(0x7f00000001c0)=@sco, &(0x7f0000000040)=0x80, 0x800) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000240)={0x0, @random="16f6227bc8dc"}) setsockopt(r0, 0x2b, 0x7f, &(0x7f0000000380)="05bb8767f37cfb0cb79c177ef44b9df66984006e19e189d21c8ffd22399d7906519b3d8f527a4da23d379c86e86cd2cdd638eda719980cc50a76b28f762369db8c53d83e445363758d0f5f60b9772243404ab5d185d92ed103733fce33bed555f3251e51217c3cae8698d2d876af795ca983c966bb0c0bea0fea260c3940e4e41f4fd81bad595e8c43e8749edb3da637aa830cf28be2d3493f39f37e913242c09bf2d23679f8457dc8536579f8f2ac", 0xaf) syz_execute_func(&(0x7f0000000080)="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") getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000280)={0x0, 0xb4}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000300)={0xfffffffffffffffa, 0x8, 0xa, 0x4, 0x32fa4594, 0x4, 0x5d00, 0x308, r2}, &(0x7f0000000340)=0x20) 17:15:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 17:15:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x1f000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x5, 0x0, 0x0, 0x0}) 17:15:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x2, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:56 executing program 2 (fault-call:3 fault-nth:3): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:15:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x6, 0x0, 0x0, 0x0}) [ 1969.438757] FAULT_INJECTION: forcing a failure. [ 1969.438757] name fail_page_alloc, interval 1, probability 0, space 0, times 0 17:15:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x20000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1969.494475] CPU: 1 PID: 5583 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1969.501393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1969.510774] Call Trace: [ 1969.513402] dump_stack+0x172/0x1f0 [ 1969.517097] should_fail.cold+0xa/0x1b [ 1969.521023] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1969.526156] ? ___might_sleep+0x163/0x280 [ 1969.530350] ? __might_sleep+0x95/0x190 [ 1969.534363] __alloc_pages_nodemask+0x1ee/0x760 [ 1969.539052] ? fs_reclaim_acquire+0x20/0x20 [ 1969.543402] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1969.548982] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1969.554048] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1969.559617] alloc_pages_current+0x107/0x210 [ 1969.564061] get_zeroed_page+0x14/0x50 [ 1969.567976] mon_alloc_buff+0xc2/0x190 [ 1969.571916] ? mon_bin_ioctl+0x48e/0xc80 [ 1969.576009] mon_bin_ioctl+0x4ad/0xc80 [ 1969.579949] ? mon_bin_get_event+0x450/0x450 [ 1969.584382] ? __fget+0x340/0x540 [ 1969.587856] ? ___might_sleep+0x163/0x280 17:15:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f00000001c0)={0x7, 0x8}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000000ff) socket$can_raw(0x1d, 0x3, 0x1) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000040)=0x1000) socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x1, 0x30}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000280)={r1, 0x4}, &(0x7f00000002c0)=0x8) sched_setattr(0x0, &(0x7f0000000000)={0x30, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) unshare(0x40000000) syz_execute_func(&(0x7f0000000080)="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") 17:15:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x7, 0x0, 0x0, 0x0}) [ 1969.592048] ? __might_sleep+0x95/0x190 [ 1969.596064] ? mon_bin_get_event+0x450/0x450 [ 1969.600509] do_vfs_ioctl+0xd6e/0x1390 [ 1969.604420] ? selinux_file_ioctl+0x46f/0x5e0 [ 1969.608954] ? selinux_file_ioctl+0x125/0x5e0 [ 1969.613494] ? ioctl_preallocate+0x210/0x210 [ 1969.617934] ? selinux_file_mprotect+0x620/0x620 [ 1969.622732] ? iterate_fd+0x360/0x360 [ 1969.626755] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1969.632324] ? fput+0x128/0x1a0 [ 1969.635761] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 17:15:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x48000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1969.641506] ? security_file_ioctl+0x93/0xc0 [ 1969.645945] ksys_ioctl+0xab/0xd0 [ 1969.649426] __x64_sys_ioctl+0x73/0xb0 [ 1969.653355] do_syscall_64+0x103/0x610 [ 1969.657283] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1969.662522] RIP: 0033:0x458da9 [ 1969.665740] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1969.684677] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:15:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}) 17:15:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x3, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1969.692430] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1969.699735] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1969.707043] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1969.716102] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1969.723408] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:15:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x8, 0x0, 0x0, 0x0}) 17:15:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 17:15:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x4c000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x4, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:57 executing program 2 (fault-call:3 fault-nth:4): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:15:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") fcntl$dupfd(r0, 0x406, r0) syz_execute_func(&(0x7f0000000080)="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") 17:15:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x10, 0x0, 0x0, 0x0}) 17:15:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}) 17:15:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x5d000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x5, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1970.153257] FAULT_INJECTION: forcing a failure. [ 1970.153257] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1970.251236] CPU: 0 PID: 5635 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1970.258161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1970.267545] Call Trace: [ 1970.270184] dump_stack+0x172/0x1f0 [ 1970.273859] should_fail.cold+0xa/0x1b [ 1970.277792] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1970.282928] ? ___might_sleep+0x163/0x280 [ 1970.287119] ? __might_sleep+0x95/0x190 [ 1970.291128] __alloc_pages_nodemask+0x1ee/0x760 [ 1970.295832] ? check_preemption_disabled+0x48/0x290 [ 1970.300894] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1970.306042] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1970.311623] alloc_pages_current+0x107/0x210 [ 1970.316071] get_zeroed_page+0x14/0x50 [ 1970.319993] mon_alloc_buff+0xc2/0x190 [ 1970.323912] ? mon_bin_ioctl+0x48e/0xc80 [ 1970.328003] mon_bin_ioctl+0x4ad/0xc80 [ 1970.331929] ? mon_bin_get_event+0x450/0x450 [ 1970.336381] ? __fget+0x340/0x540 [ 1970.339866] ? ___might_sleep+0x163/0x280 [ 1970.344051] ? __might_sleep+0x95/0x190 [ 1970.348061] ? mon_bin_get_event+0x450/0x450 [ 1970.352513] do_vfs_ioctl+0xd6e/0x1390 [ 1970.356436] ? selinux_file_ioctl+0x46f/0x5e0 [ 1970.360961] ? selinux_file_ioctl+0x125/0x5e0 [ 1970.365494] ? ioctl_preallocate+0x210/0x210 [ 1970.369935] ? selinux_file_mprotect+0x620/0x620 [ 1970.374749] ? iterate_fd+0x360/0x360 [ 1970.378597] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1970.384182] ? fput+0x128/0x1a0 [ 1970.387510] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1970.393090] ? security_file_ioctl+0x93/0xc0 [ 1970.397544] ksys_ioctl+0xab/0xd0 [ 1970.401043] __x64_sys_ioctl+0x73/0xb0 [ 1970.404968] do_syscall_64+0x103/0x610 [ 1970.408899] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1970.414127] RIP: 0033:0x458da9 [ 1970.417361] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1970.436303] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1970.444070] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1970.451385] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1970.458729] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1970.466035] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1970.473348] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:15:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x48, 0x0, 0x0, 0x0}) [ 1970.498683] scsi_io_completion_action: 22 callbacks suppressed [ 1970.498726] sd 0:0:1:0: [sg0] tag#63 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1970.519762] sd 0:0:1:0: [sg0] tag#63 CDB: opcode=0xe5 (vendor) [ 1970.525878] sd 0:0:1:0: [sg0] tag#63 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1970.534689] sd 0:0:1:0: [sg0] tag#63 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1970.543537] sd 0:0:1:0: [sg0] tag#63 CDB[20]: a0 [ 1970.560214] sd 0:0:1:0: [sg0] tag#63 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1970.568983] sd 0:0:1:0: [sg0] tag#63 CDB: opcode=0xe5 (vendor) [ 1970.575215] sd 0:0:1:0: [sg0] tag#63 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1970.582282] sd 0:0:1:0: [sg0] tag#223 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1970.583985] sd 0:0:1:0: [sg0] tag#63 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1970.592722] sd 0:0:1:0: [sg0] tag#223 CDB: opcode=0xe5 (vendor) 17:15:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}) [ 1970.601497] sd 0:0:1:0: [sg0] tag#63 CDB[20]: a0 [ 1970.607585] sd 0:0:1:0: [sg0] tag#223 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1970.607604] sd 0:0:1:0: [sg0] tag#223 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1970.607619] sd 0:0:1:0: [sg0] tag#223 CDB[20]: a0 17:15:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}) 17:15:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x4c, 0x0, 0x0, 0x0}) 17:15:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x60000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:57 executing program 2 (fault-call:3 fault-nth:5): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:15:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x6, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1970.847241] sd 0:0:1:0: [sg0] tag#63 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1970.855974] sd 0:0:1:0: [sg0] tag#63 CDB: opcode=0xe5 (vendor) [ 1970.862232] sd 0:0:1:0: [sg0] tag#63 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1970.871027] sd 0:0:1:0: [sg0] tag#63 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1970.879745] sd 0:0:1:0: [sg0] tag#63 CDB[20]: a0 [ 1970.895528] FAULT_INJECTION: forcing a failure. [ 1970.895528] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1970.911708] sd 0:0:1:0: [sg0] tag#223 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1970.920417] sd 0:0:1:0: [sg0] tag#223 CDB: opcode=0xe5 (vendor) [ 1970.926630] sd 0:0:1:0: [sg0] tag#223 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1970.935536] sd 0:0:1:0: [sg0] tag#223 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1970.944461] sd 0:0:1:0: [sg0] tag#223 CDB[20]: a0 [ 1970.951349] sd 0:0:1:0: [sg0] tag#223 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1970.960050] sd 0:0:1:0: [sg0] tag#223 CDB: opcode=0xe5 (vendor) [ 1970.966257] sd 0:0:1:0: [sg0] tag#223 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1970.975146] sd 0:0:1:0: [sg0] tag#223 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1970.975169] sd 0:0:1:0: [sg0] tag#223 CDB[20]: a0 [ 1970.980596] CPU: 1 PID: 5669 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1970.995768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1971.005151] Call Trace: [ 1971.007799] dump_stack+0x172/0x1f0 [ 1971.011472] should_fail.cold+0xa/0x1b [ 1971.015427] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1971.020578] ? ___might_sleep+0x163/0x280 [ 1971.024767] ? __might_sleep+0x95/0x190 [ 1971.028781] __alloc_pages_nodemask+0x1ee/0x760 [ 1971.033490] ? check_preemption_disabled+0x48/0x290 [ 1971.038549] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1971.043623] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1971.049210] alloc_pages_current+0x107/0x210 [ 1971.053688] get_zeroed_page+0x14/0x50 [ 1971.057648] mon_alloc_buff+0xc2/0x190 [ 1971.061574] ? mon_bin_ioctl+0x48e/0xc80 [ 1971.065668] mon_bin_ioctl+0x4ad/0xc80 [ 1971.069603] ? mon_bin_get_event+0x450/0x450 [ 1971.074053] ? __fget+0x340/0x540 [ 1971.077543] ? ___might_sleep+0x163/0x280 [ 1971.081733] ? __might_sleep+0x95/0x190 [ 1971.085746] ? mon_bin_get_event+0x450/0x450 [ 1971.090192] do_vfs_ioctl+0xd6e/0x1390 [ 1971.094120] ? selinux_file_ioctl+0x46f/0x5e0 [ 1971.098649] ? selinux_file_ioctl+0x125/0x5e0 [ 1971.103181] ? ioctl_preallocate+0x210/0x210 [ 1971.107631] ? selinux_file_mprotect+0x620/0x620 [ 1971.112432] ? iterate_fd+0x360/0x360 [ 1971.116272] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1971.121095] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1971.126658] ? security_file_ioctl+0x93/0xc0 [ 1971.131098] ksys_ioctl+0xab/0xd0 [ 1971.131125] __x64_sys_ioctl+0x73/0xb0 [ 1971.131142] ? do_syscall_64+0xfe/0x610 [ 1971.131156] do_syscall_64+0x103/0x610 [ 1971.131176] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1971.131189] RIP: 0033:0x458da9 [ 1971.131204] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1971.131221] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1971.131236] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1971.131251] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 17:15:58 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0xb0902) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f00000001c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000080)="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") 17:15:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}) 17:15:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x7, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x60, 0x0, 0x0, 0x0}) 17:15:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x68000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1971.173765] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1971.188799] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1971.188815] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 [ 1971.270266] sd 0:0:1:0: [sg0] tag#63 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1971.279296] sd 0:0:1:0: [sg0] tag#63 CDB: opcode=0xe5 (vendor) [ 1971.285569] sd 0:0:1:0: [sg0] tag#63 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1971.294374] sd 0:0:1:0: [sg0] tag#63 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1971.303176] sd 0:0:1:0: [sg0] tag#63 CDB[20]: a0 17:15:58 executing program 2 (fault-call:3 fault-nth:6): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) [ 1971.316466] sd 0:0:1:0: [sg0] tag#226 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1971.325423] sd 0:0:1:0: [sg0] tag#226 CDB: opcode=0xe5 (vendor) [ 1971.331623] sd 0:0:1:0: [sg0] tag#226 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1971.340424] sd 0:0:1:0: [sg0] tag#226 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1971.349356] sd 0:0:1:0: [sg0] tag#226 CDB[20]: a0 [ 1971.355604] sd 0:0:1:0: [sg0] tag#226 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1971.364382] sd 0:0:1:0: [sg0] tag#226 CDB: opcode=0xe5 (vendor) [ 1971.370513] sd 0:0:1:0: [sg0] tag#226 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1971.378060] FAULT_INJECTION: forcing a failure. [ 1971.378060] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1971.379438] sd 0:0:1:0: [sg0] tag#226 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1971.399739] CPU: 0 PID: 5696 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1971.400207] sd 0:0:1:0: [sg0] tag#226 CDB[20]: a0 [ 1971.407069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1971.407079] Call Trace: [ 1971.407114] dump_stack+0x172/0x1f0 [ 1971.407138] should_fail.cold+0xa/0x1b [ 1971.407159] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1971.407178] ? ___might_sleep+0x163/0x280 [ 1971.407196] ? __might_sleep+0x95/0x190 [ 1971.407234] __alloc_pages_nodemask+0x1ee/0x760 [ 1971.449552] ? fs_reclaim_acquire+0x20/0x20 [ 1971.453943] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1971.459516] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1971.464583] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1971.470158] alloc_pages_current+0x107/0x210 [ 1971.474609] get_zeroed_page+0x14/0x50 [ 1971.478544] mon_alloc_buff+0xc2/0x190 [ 1971.482454] ? mon_bin_ioctl+0x48e/0xc80 [ 1971.486569] mon_bin_ioctl+0x4ad/0xc80 [ 1971.490500] ? mon_bin_get_event+0x450/0x450 [ 1971.494951] ? __fget+0x340/0x540 [ 1971.498444] ? ___might_sleep+0x163/0x280 [ 1971.502629] ? __might_sleep+0x95/0x190 [ 1971.506646] ? mon_bin_get_event+0x450/0x450 [ 1971.511096] do_vfs_ioctl+0xd6e/0x1390 [ 1971.515016] ? selinux_file_ioctl+0x46f/0x5e0 [ 1971.519539] ? selinux_file_ioctl+0x125/0x5e0 [ 1971.524068] ? ioctl_preallocate+0x210/0x210 [ 1971.526791] sd 0:0:1:0: [sg0] tag#227 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1971.528506] ? selinux_file_mprotect+0x620/0x620 [ 1971.528535] ? iterate_fd+0x360/0x360 [ 1971.528566] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1971.537262] sd 0:0:1:0: [sg0] tag#227 CDB: opcode=0xe5 (vendor) [ 1971.541953] ? fput+0x128/0x1a0 [ 1971.541979] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1971.541996] ? security_file_ioctl+0x93/0xc0 17:15:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x8, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) 17:15:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x68, 0x0, 0x0, 0x0}) 17:15:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x6c000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1971.542014] ksys_ioctl+0xab/0xd0 [ 1971.542035] __x64_sys_ioctl+0x73/0xb0 [ 1971.542057] do_syscall_64+0x103/0x610 [ 1971.545882] sd 0:0:1:0: [sg0] tag#227 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1971.551442] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1971.551456] RIP: 0033:0x458da9 [ 1971.551472] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 17:15:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1971.551480] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1971.551494] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1971.551509] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1971.557622] sd 0:0:1:0: [sg0] tag#227 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1971.560905] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1971.560914] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 17:15:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x70000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1971.560921] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 [ 1971.566569] sd 0:0:1:0: [sg0] tag#227 CDB[20]: a0 17:15:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f00000001c0)="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") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer\x00', 0x101080, 0x0) bind$rose(r1, &(0x7f0000000700)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, @bcast}, 0x1c) 17:15:59 executing program 2 (fault-call:3 fault-nth:7): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:15:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x48, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x6c, 0x0, 0x0, 0x0}) 17:15:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x74000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x4c, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1972.501693] FAULT_INJECTION: forcing a failure. [ 1972.501693] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1972.553176] CPU: 0 PID: 5739 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1972.560089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1972.569494] Call Trace: [ 1972.572127] dump_stack+0x172/0x1f0 [ 1972.575795] should_fail.cold+0xa/0x1b [ 1972.579725] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1972.584866] ? ___might_sleep+0x163/0x280 [ 1972.589052] ? __might_sleep+0x95/0x190 [ 1972.593070] __alloc_pages_nodemask+0x1ee/0x760 [ 1972.597782] ? fs_reclaim_acquire+0x20/0x20 [ 1972.602145] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1972.607730] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1972.612802] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1972.618396] alloc_pages_current+0x107/0x210 [ 1972.622852] get_zeroed_page+0x14/0x50 [ 1972.626778] mon_alloc_buff+0xc2/0x190 [ 1972.630692] ? mon_bin_ioctl+0x48e/0xc80 [ 1972.634796] mon_bin_ioctl+0x4ad/0xc80 [ 1972.638725] ? mon_bin_get_event+0x450/0x450 [ 1972.643172] ? __fget+0x340/0x540 [ 1972.646661] ? ___might_sleep+0x163/0x280 [ 1972.650846] ? __might_sleep+0x95/0x190 [ 1972.654853] ? mon_bin_get_event+0x450/0x450 [ 1972.659348] do_vfs_ioctl+0xd6e/0x1390 [ 1972.663273] ? selinux_file_ioctl+0x46f/0x5e0 [ 1972.667802] ? selinux_file_ioctl+0x125/0x5e0 [ 1972.672433] ? ioctl_preallocate+0x210/0x210 [ 1972.676880] ? selinux_file_mprotect+0x620/0x620 [ 1972.681685] ? iterate_fd+0x360/0x360 [ 1972.685798] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1972.691393] ? fput+0x128/0x1a0 [ 1972.694729] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1972.700313] ? security_file_ioctl+0x93/0xc0 [ 1972.704781] ksys_ioctl+0xab/0xd0 [ 1972.708277] __x64_sys_ioctl+0x73/0xb0 [ 1972.712227] do_syscall_64+0x103/0x610 [ 1972.716171] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1972.721393] RIP: 0033:0x458da9 [ 1972.724614] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1972.743648] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:15:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x70, 0x0, 0x0, 0x0}) 17:15:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x7a000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1972.751402] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1972.758718] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1972.766024] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1972.773338] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1972.780647] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x74, 0x0, 0x0, 0x0}) 17:16:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x68, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') syz_execute_func(&(0x7f0000000080)="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") 17:16:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0xfeffffff, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x7a, 0x0, 0x0, 0x0}) 17:16:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x6c, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:00 executing program 2 (fault-call:3 fault-nth:8): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x70, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0xffffff0f, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0xfc, 0x0, 0x0, 0x0}) [ 1973.540103] FAULT_INJECTION: forcing a failure. [ 1973.540103] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1973.599754] CPU: 0 PID: 5794 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1973.606665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1973.616086] Call Trace: [ 1973.618726] dump_stack+0x172/0x1f0 [ 1973.622400] should_fail.cold+0xa/0x1b [ 1973.626352] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1973.631496] ? ___might_sleep+0x163/0x280 [ 1973.635688] ? __might_sleep+0x95/0x190 [ 1973.639718] __alloc_pages_nodemask+0x1ee/0x760 [ 1973.644434] ? fs_reclaim_acquire+0x20/0x20 [ 1973.648800] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1973.654386] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1973.659461] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1973.665050] alloc_pages_current+0x107/0x210 [ 1973.669503] get_zeroed_page+0x14/0x50 [ 1973.674121] mon_alloc_buff+0xc2/0x190 [ 1973.678041] ? mon_bin_ioctl+0x48e/0xc80 [ 1973.682138] mon_bin_ioctl+0x4ad/0xc80 [ 1973.686075] ? mon_bin_get_event+0x450/0x450 [ 1973.690522] ? __fget+0x340/0x540 [ 1973.694006] ? ___might_sleep+0x163/0x280 [ 1973.698189] ? __might_sleep+0x95/0x190 [ 1973.702201] ? mon_bin_get_event+0x450/0x450 [ 1973.706656] do_vfs_ioctl+0xd6e/0x1390 [ 1973.710578] ? selinux_file_ioctl+0x46f/0x5e0 [ 1973.717654] ? selinux_file_ioctl+0x125/0x5e0 [ 1973.722202] ? ioctl_preallocate+0x210/0x210 [ 1973.726659] ? selinux_file_mprotect+0x620/0x620 [ 1973.731463] ? iterate_fd+0x360/0x360 [ 1973.735302] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1973.740886] ? fput+0x128/0x1a0 [ 1973.744204] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1973.749779] ? security_file_ioctl+0x93/0xc0 [ 1973.754216] ksys_ioctl+0xab/0xd0 [ 1973.757705] __x64_sys_ioctl+0x73/0xb0 [ 1973.761728] do_syscall_64+0x103/0x610 [ 1973.765651] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1973.770871] RIP: 0033:0x458da9 [ 1973.774089] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1973.793022] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1973.800776] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1973.808084] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1973.815389] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1973.824029] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1973.831343] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x74, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0xffffff7f, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x300, 0x0, 0x0, 0x0}) 17:16:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x7a, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:01 executing program 2 (fault-call:3 fault-nth:9): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:01 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xb830}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) syz_execute_func(&(0x7f0000000300)="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") 17:16:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffe, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1974.365062] FAULT_INJECTION: forcing a failure. [ 1974.365062] name fail_page_alloc, interval 1, probability 0, space 0, times 0 17:16:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x500, 0x0, 0x0, 0x0}) [ 1974.440890] CPU: 0 PID: 5833 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1974.447810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1974.457214] Call Trace: [ 1974.459839] dump_stack+0x172/0x1f0 [ 1974.463517] should_fail.cold+0xa/0x1b [ 1974.467461] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1974.472612] ? ___might_sleep+0x163/0x280 [ 1974.476805] ? __might_sleep+0x95/0x190 [ 1974.480829] __alloc_pages_nodemask+0x1ee/0x760 [ 1974.485556] ? fs_reclaim_acquire+0x20/0x20 17:16:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x1000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1974.489927] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1974.495519] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1974.500596] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1974.506188] alloc_pages_current+0x107/0x210 [ 1974.510653] get_zeroed_page+0x14/0x50 [ 1974.514588] mon_alloc_buff+0xc2/0x190 [ 1974.518515] ? mon_bin_ioctl+0x48e/0xc80 [ 1974.522621] mon_bin_ioctl+0x4ad/0xc80 [ 1974.526553] ? mon_bin_get_event+0x450/0x450 [ 1974.531010] ? __fget+0x340/0x540 [ 1974.534507] ? ___might_sleep+0x163/0x280 [ 1974.538701] ? __might_sleep+0x95/0x190 [ 1974.542746] ? mon_bin_get_event+0x450/0x450 [ 1974.547213] do_vfs_ioctl+0xd6e/0x1390 [ 1974.551150] ? selinux_file_ioctl+0x46f/0x5e0 [ 1974.555683] ? selinux_file_ioctl+0x125/0x5e0 [ 1974.560231] ? ioctl_preallocate+0x210/0x210 [ 1974.564679] ? selinux_file_mprotect+0x620/0x620 [ 1974.569502] ? iterate_fd+0x360/0x360 [ 1974.573357] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1974.578969] ? fput+0x128/0x1a0 [ 1974.582301] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1974.587884] ? security_file_ioctl+0x93/0xc0 [ 1974.592342] ksys_ioctl+0xab/0xd0 [ 1974.595833] __x64_sys_ioctl+0x73/0xb0 [ 1974.599761] do_syscall_64+0x103/0x610 [ 1974.603695] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1974.608930] RIP: 0033:0x458da9 [ 1974.612160] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1974.631117] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:16:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x20000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0xac, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1974.638879] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1974.646275] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1974.653628] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1974.660938] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1974.668241] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x600, 0x0, 0x0, 0x0}) 17:16:01 executing program 2 (fault-call:3 fault-nth:10): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x300, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x100000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1974.842950] FAULT_INJECTION: forcing a failure. [ 1974.842950] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1974.905207] CPU: 1 PID: 5869 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1974.912225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1974.921626] Call Trace: [ 1974.924271] dump_stack+0x172/0x1f0 [ 1974.927962] should_fail.cold+0xa/0x1b [ 1974.931908] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1974.937055] ? ___might_sleep+0x163/0x280 [ 1974.941259] ? __might_sleep+0x95/0x190 [ 1974.945288] __alloc_pages_nodemask+0x1ee/0x760 [ 1974.950011] ? check_preemption_disabled+0x48/0x290 [ 1974.955174] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1974.960254] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1974.965842] alloc_pages_current+0x107/0x210 [ 1974.970308] get_zeroed_page+0x14/0x50 [ 1974.974269] mon_alloc_buff+0xc2/0x190 [ 1974.978200] ? mon_bin_ioctl+0x48e/0xc80 [ 1974.982316] mon_bin_ioctl+0x4ad/0xc80 [ 1974.986274] ? mon_bin_get_event+0x450/0x450 [ 1974.990734] ? __fget+0x340/0x540 [ 1974.994240] ? ___might_sleep+0x163/0x280 [ 1974.998437] ? __might_sleep+0x95/0x190 [ 1975.002457] ? mon_bin_get_event+0x450/0x450 [ 1975.006920] do_vfs_ioctl+0xd6e/0x1390 [ 1975.010849] ? selinux_file_ioctl+0x46f/0x5e0 [ 1975.015403] ? selinux_file_ioctl+0x125/0x5e0 [ 1975.019949] ? ioctl_preallocate+0x210/0x210 [ 1975.024394] ? selinux_file_mprotect+0x620/0x620 [ 1975.029204] ? iterate_fd+0x360/0x360 [ 1975.033063] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1975.038637] ? fput+0x128/0x1a0 [ 1975.041960] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1975.041983] ? security_file_ioctl+0x93/0xc0 [ 1975.042006] ksys_ioctl+0xab/0xd0 [ 1975.052062] __x64_sys_ioctl+0x73/0xb0 [ 1975.052082] do_syscall_64+0x103/0x610 [ 1975.052103] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1975.052123] RIP: 0033:0x458da9 [ 1975.071798] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1975.090746] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1975.098497] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1975.105802] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1975.113109] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1975.120415] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1975.127724] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x700, 0x0, 0x0, 0x0}) 17:16:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:02 executing program 2 (fault-call:3 fault-nth:11): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x500, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:02 executing program 5: r0 = request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='eth1+\\{vboxnet1eth0vboxnet1trusted:\x00', 0xfffffffffffffffd) keyctl$read(0xb, r0, &(0x7f0000000240)=""/4096, 0x49e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000080)="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") 17:16:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x200000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1975.325388] FAULT_INJECTION: forcing a failure. [ 1975.325388] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1975.341770] CPU: 1 PID: 5895 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1975.348672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1975.358052] Call Trace: [ 1975.360672] dump_stack+0x172/0x1f0 [ 1975.364353] should_fail.cold+0xa/0x1b [ 1975.368301] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1975.373530] ? ___might_sleep+0x163/0x280 [ 1975.377715] ? __might_sleep+0x95/0x190 [ 1975.381723] __alloc_pages_nodemask+0x1ee/0x760 [ 1975.386428] ? check_preemption_disabled+0x48/0x290 [ 1975.391483] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1975.396549] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1975.402218] alloc_pages_current+0x107/0x210 [ 1975.402242] get_zeroed_page+0x14/0x50 [ 1975.402264] mon_alloc_buff+0xc2/0x190 [ 1975.410620] ? mon_bin_ioctl+0x48e/0xc80 [ 1975.418632] mon_bin_ioctl+0x4ad/0xc80 [ 1975.422553] ? mon_bin_get_event+0x450/0x450 [ 1975.427011] ? __fget+0x340/0x540 [ 1975.430497] ? ___might_sleep+0x163/0x280 [ 1975.434691] ? __might_sleep+0x95/0x190 [ 1975.438698] ? mon_bin_get_event+0x450/0x450 [ 1975.443134] do_vfs_ioctl+0xd6e/0x1390 [ 1975.443150] ? selinux_file_ioctl+0x46f/0x5e0 [ 1975.443162] ? selinux_file_ioctl+0x125/0x5e0 [ 1975.443179] ? ioctl_preallocate+0x210/0x210 [ 1975.443197] ? selinux_file_mprotect+0x620/0x620 [ 1975.451618] ? iterate_fd+0x360/0x360 [ 1975.451639] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1975.451652] ? fput+0x128/0x1a0 [ 1975.451680] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1975.474763] ? security_file_ioctl+0x93/0xc0 [ 1975.483608] ksys_ioctl+0xab/0xd0 [ 1975.483628] __x64_sys_ioctl+0x73/0xb0 [ 1975.483646] do_syscall_64+0x103/0x610 [ 1975.483667] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1975.483685] RIP: 0033:0x458da9 17:16:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x1f00, 0x0, 0x0, 0x0}) 17:16:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x300000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1975.507759] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1975.526692] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1975.534449] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1975.541758] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1975.549076] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1975.556378] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1975.563680] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 [ 1975.579658] scsi_io_completion_action: 33 callbacks suppressed [ 1975.579692] sd 0:0:1:0: [sg0] tag#119 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1975.589281] sd 0:0:1:0: [sg0] tag#246 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1975.594893] sd 0:0:1:0: [sg0] tag#119 CDB: opcode=0xe5 (vendor) [ 1975.594919] sd 0:0:1:0: [sg0] tag#119 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1975.603875] sd 0:0:1:0: [sg0] tag#246 CDB: opcode=0xe5 (vendor) 17:16:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x600, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1975.609957] sd 0:0:1:0: [sg0] tag#119 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1975.618841] sd 0:0:1:0: [sg0] tag#246 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1975.625025] sd 0:0:1:0: [sg0] tag#119 CDB[20]: a0 [ 1975.633869] sd 0:0:1:0: [sg0] tag#246 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1975.647702] sd 0:0:1:0: [sg0] tag#246 CDB[20]: a0 17:16:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1975.673584] sd 0:0:1:0: [sg0] tag#246 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1975.682438] sd 0:0:1:0: [sg0] tag#246 CDB: opcode=0xe5 (vendor) [ 1975.688568] sd 0:0:1:0: [sg0] tag#246 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1975.697648] sd 0:0:1:0: [sg0] tag#246 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1975.706543] sd 0:0:1:0: [sg0] tag#246 CDB[20]: a0 17:16:02 executing program 2 (fault-call:3 fault-nth:12): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x700, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x400000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x2000, 0x0, 0x0, 0x0}) 17:16:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1975.895733] sd 0:0:1:0: [sg0] tag#246 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1975.904561] sd 0:0:1:0: [sg0] tag#246 CDB: opcode=0xe5 (vendor) [ 1975.910771] sd 0:0:1:0: [sg0] tag#246 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1975.919607] sd 0:0:1:0: [sg0] tag#246 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1975.928529] sd 0:0:1:0: [sg0] tag#246 CDB[20]: a0 [ 1975.965774] sd 0:0:1:0: [sg0] tag#246 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1975.974586] sd 0:0:1:0: [sg0] tag#246 CDB: opcode=0xe5 (vendor) [ 1975.980908] sd 0:0:1:0: [sg0] tag#246 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1975.989736] sd 0:0:1:0: [sg0] tag#246 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1975.998673] sd 0:0:1:0: [sg0] tag#246 CDB[20]: a0 [ 1976.028724] sd 0:0:1:0: [sg0] tag#119 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1976.037782] sd 0:0:1:0: [sg0] tag#119 CDB: opcode=0xe5 (vendor) [ 1976.043980] sd 0:0:1:0: [sg0] tag#119 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1976.052846] sd 0:0:1:0: [sg0] tag#119 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1976.061698] sd 0:0:1:0: [sg0] tag#119 CDB[20]: a0 [ 1976.258816] FAULT_INJECTION: forcing a failure. [ 1976.258816] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1976.276865] CPU: 1 PID: 5945 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1976.283771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1976.293164] Call Trace: [ 1976.295810] dump_stack+0x172/0x1f0 [ 1976.299484] should_fail.cold+0xa/0x1b [ 1976.303415] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1976.308637] ? ___might_sleep+0x163/0x280 [ 1976.312824] ? __might_sleep+0x95/0x190 [ 1976.316830] __alloc_pages_nodemask+0x1ee/0x760 [ 1976.321525] ? __kmalloc+0x587/0x750 [ 1976.325271] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1976.330366] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1976.336027] alloc_pages_current+0x107/0x210 [ 1976.340492] get_zeroed_page+0x14/0x50 [ 1976.344411] mon_alloc_buff+0xc2/0x190 [ 1976.348344] ? mon_bin_ioctl+0x48e/0xc80 [ 1976.352541] mon_bin_ioctl+0x4ad/0xc80 [ 1976.356464] ? mon_bin_get_event+0x450/0x450 [ 1976.360903] ? __fget+0x340/0x540 [ 1976.364386] ? ___might_sleep+0x163/0x280 [ 1976.368563] ? __might_sleep+0x95/0x190 [ 1976.372573] ? mon_bin_get_event+0x450/0x450 [ 1976.377019] do_vfs_ioctl+0xd6e/0x1390 [ 1976.380959] ? selinux_file_ioctl+0x46f/0x5e0 [ 1976.385488] ? selinux_file_ioctl+0x125/0x5e0 [ 1976.390023] ? ioctl_preallocate+0x210/0x210 [ 1976.394464] ? selinux_file_mprotect+0x620/0x620 [ 1976.399265] ? iterate_fd+0x360/0x360 [ 1976.403094] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1976.408748] ? fput+0x128/0x1a0 [ 1976.412099] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1976.417676] ? security_file_ioctl+0x93/0xc0 [ 1976.422140] ksys_ioctl+0xab/0xd0 [ 1976.425636] __x64_sys_ioctl+0x73/0xb0 [ 1976.429554] do_syscall_64+0x103/0x610 [ 1976.433475] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1976.438684] RIP: 0033:0x458da9 17:16:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x1f00, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x500000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x4800, 0x0, 0x0, 0x0}) 17:16:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000800)="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") ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x6226, 0x2c, 0xe0, 0x2, 0x1, 0x101}) [ 1976.441898] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1976.460827] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1976.468669] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1976.475966] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1976.483266] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1976.490566] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1976.497866] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 [ 1976.528647] sd 0:0:1:0: [sg0] tag#259 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1976.537651] sd 0:0:1:0: [sg0] tag#259 CDB: opcode=0xe5 (vendor) [ 1976.543930] sd 0:0:1:0: [sg0] tag#259 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1976.552825] sd 0:0:1:0: [sg0] tag#259 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1976.563335] sd 0:0:1:0: [sg0] tag#259 CDB[20]: a0 [ 1976.573706] sd 0:0:1:0: [sg0] tag#280 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1976.582497] sd 0:0:1:0: [sg0] tag#280 CDB: opcode=0xe5 (vendor) [ 1976.588617] sd 0:0:1:0: [sg0] tag#280 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1976.589002] sd 0:0:1:0: [sg0] tag#259 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1976.597581] sd 0:0:1:0: [sg0] tag#280 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1976.606292] sd 0:0:1:0: [sg0] tag#259 CDB: opcode=0xe5 (vendor) [ 1976.615393] sd 0:0:1:0: [sg0] tag#280 CDB[20]: a0 17:16:03 executing program 2 (fault-call:3 fault-nth:13): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x2000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1976.621583] sd 0:0:1:0: [sg0] tag#259 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1976.635456] sd 0:0:1:0: [sg0] tag#259 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1976.644383] sd 0:0:1:0: [sg0] tag#259 CDB[20]: a0 17:16:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x4c00, 0x0, 0x0, 0x0}) 17:16:03 executing program 5: lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000003c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@empty, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000500)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000600)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) getresuid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f00000007c0)) lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)=0x0) r9 = getgid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000980)={0x0, 0x0, 0x0}, &(0x7f00000009c0)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000a00)={{}, {0x1, 0x4}, [{0x2, 0x6, r0}, {0x2, 0x1, r1}, {0x2, 0x3, r2}, {0x2, 0x5, r3}, {0x2, 0x3, r4}, {0x2, 0x2, r5}, {0x2, 0x4, r6}, {0x2, 0x4, r7}], {0x4, 0x7}, [{0x8, 0x4, r8}, {0x8, 0x2, r9}, {0x8, 0x5, r10}], {0x10, 0x1}, {0x20, 0x3}}, 0x7c, 0x2) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r11, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000080)="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") [ 1976.764502] FAULT_INJECTION: forcing a failure. [ 1976.764502] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1976.775563] sd 0:0:1:0: [sg0] tag#260 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1976.785376] sd 0:0:1:0: [sg0] tag#260 CDB: opcode=0xe5 (vendor) [ 1976.791560] sd 0:0:1:0: [sg0] tag#260 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1976.797130] CPU: 1 PID: 5973 Comm: syz-executor.2 Not tainted 4.19.38 #6 17:16:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1976.800393] sd 0:0:1:0: [sg0] tag#260 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1976.807335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1976.807343] Call Trace: [ 1976.807377] dump_stack+0x172/0x1f0 [ 1976.807397] should_fail.cold+0xa/0x1b [ 1976.807415] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1976.807438] ? ___might_sleep+0x163/0x280 [ 1976.816430] sd 0:0:1:0: [sg0] tag#260 CDB[20]: a0 [ 1976.826264] ? __might_sleep+0x95/0x190 [ 1976.826284] __alloc_pages_nodemask+0x1ee/0x760 [ 1976.826302] ? fs_reclaim_acquire+0x20/0x20 [ 1976.826330] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1976.826346] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1976.826372] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1976.841709] alloc_pages_current+0x107/0x210 [ 1976.841735] get_zeroed_page+0x14/0x50 [ 1976.841756] mon_alloc_buff+0xc2/0x190 [ 1976.850775] ? mon_bin_ioctl+0x48e/0xc80 [ 1976.850794] mon_bin_ioctl+0x4ad/0xc80 [ 1976.850811] ? mon_bin_get_event+0x450/0x450 [ 1976.850827] ? __fget+0x340/0x540 [ 1976.850843] ? ___might_sleep+0x163/0x280 [ 1976.850859] ? __might_sleep+0x95/0x190 [ 1976.850877] ? mon_bin_get_event+0x450/0x450 [ 1976.920529] do_vfs_ioctl+0xd6e/0x1390 [ 1976.924456] ? selinux_file_ioctl+0x46f/0x5e0 [ 1976.928979] ? selinux_file_ioctl+0x125/0x5e0 [ 1976.933503] ? ioctl_preallocate+0x210/0x210 [ 1976.937935] ? selinux_file_mprotect+0x620/0x620 [ 1976.942724] ? iterate_fd+0x360/0x360 [ 1976.946572] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1976.952150] ? fput+0x128/0x1a0 [ 1976.955468] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1976.961041] ? security_file_ioctl+0x93/0xc0 [ 1976.965523] ksys_ioctl+0xab/0xd0 [ 1976.969026] __x64_sys_ioctl+0x73/0xb0 [ 1976.972976] do_syscall_64+0x103/0x610 [ 1976.976947] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1976.982179] RIP: 0033:0x458da9 [ 1976.985410] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1977.004427] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:16:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x6000, 0x0, 0x0, 0x0}) [ 1977.012174] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1977.019620] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1977.027277] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1977.034574] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1977.041866] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x600000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:04 executing program 5: syz_execute_func(&(0x7f0000000200)="660fdfc56566440f5c41000f77427300400f992cd5b000000066439c66358900920f0bc4c101e217") r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f00000002c0)={0x0, 0x7, 0x76e}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x7c, r2, 0x500, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xffffffffffffff80}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x90}, 0x4000) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000080)="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") write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) accept4$packet(r0, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001840)=0x14, 0x800) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000001880)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, r4}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000380)={0x4, 0x8, 0xfa00, {r3, 0x4}}, 0x10) r5 = accept4(r1, &(0x7f0000000240)=@ethernet={0x0, @local}, &(0x7f0000000040)=0x80, 0x800) connect$pptp(r5, &(0x7f00000001c0)={0x18, 0x2, {0x0, @loopback}}, 0x1e) 17:16:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x6800, 0x0, 0x0, 0x0}) 17:16:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x3f00, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:04 executing program 2 (fault-call:3 fault-nth:14): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x700000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x6c00, 0x0, 0x0, 0x0}) 17:16:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000080)="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") [ 1977.465574] FAULT_INJECTION: forcing a failure. [ 1977.465574] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1977.529778] CPU: 0 PID: 6014 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1977.536688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1977.546082] Call Trace: [ 1977.548758] dump_stack+0x172/0x1f0 [ 1977.552433] should_fail.cold+0xa/0x1b [ 1977.556368] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1977.561513] ? ___might_sleep+0x163/0x280 [ 1977.565693] ? __might_sleep+0x95/0x190 [ 1977.569722] __alloc_pages_nodemask+0x1ee/0x760 [ 1977.574420] ? check_preemption_disabled+0x48/0x290 [ 1977.579458] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1977.584563] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1977.590162] alloc_pages_current+0x107/0x210 [ 1977.594614] get_zeroed_page+0x14/0x50 [ 1977.598541] mon_alloc_buff+0xc2/0x190 [ 1977.602468] ? mon_bin_ioctl+0x48e/0xc80 [ 1977.606570] mon_bin_ioctl+0x4ad/0xc80 [ 1977.610537] ? mon_bin_get_event+0x450/0x450 [ 1977.614984] ? __fget+0x340/0x540 [ 1977.618473] ? ___might_sleep+0x163/0x280 [ 1977.622657] ? __might_sleep+0x95/0x190 [ 1977.626664] ? mon_bin_get_event+0x450/0x450 [ 1977.631106] do_vfs_ioctl+0xd6e/0x1390 [ 1977.631125] ? selinux_file_ioctl+0x46f/0x5e0 [ 1977.631137] ? selinux_file_ioctl+0x125/0x5e0 [ 1977.631152] ? ioctl_preallocate+0x210/0x210 [ 1977.631164] ? selinux_file_mprotect+0x620/0x620 [ 1977.631185] ? iterate_fd+0x360/0x360 [ 1977.631205] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1977.631218] ? fput+0x128/0x1a0 [ 1977.631240] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1977.631258] ? security_file_ioctl+0x93/0xc0 [ 1977.631278] ksys_ioctl+0xab/0xd0 17:16:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x800000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x4800, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1977.639701] __x64_sys_ioctl+0x73/0xb0 [ 1977.639729] do_syscall_64+0x103/0x610 [ 1977.687364] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1977.692592] RIP: 0033:0x458da9 [ 1977.695809] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1977.717199] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:16:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x1f00000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1977.724978] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1977.732546] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1977.739851] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1977.747282] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1977.754593] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x7000, 0x0, 0x0, 0x0}) 17:16:04 executing program 2 (fault-call:3 fault-nth:15): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x4c00, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x2000000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1977.966567] FAULT_INJECTION: forcing a failure. [ 1977.966567] name fail_page_alloc, interval 1, probability 0, space 0, times 0 17:16:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x7400, 0x0, 0x0, 0x0}) [ 1978.052331] CPU: 0 PID: 6049 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1978.059243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1978.068629] Call Trace: [ 1978.071267] dump_stack+0x172/0x1f0 [ 1978.074942] should_fail.cold+0xa/0x1b [ 1978.078871] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1978.084186] ? ___might_sleep+0x163/0x280 [ 1978.088374] ? __might_sleep+0x95/0x190 [ 1978.092370] __alloc_pages_nodemask+0x1ee/0x760 [ 1978.092389] ? check_preemption_disabled+0x48/0x290 17:16:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x6800, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1978.092404] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1978.092431] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1978.092451] alloc_pages_current+0x107/0x210 [ 1978.092471] get_zeroed_page+0x14/0x50 [ 1978.092486] mon_alloc_buff+0xc2/0x190 [ 1978.092498] ? mon_bin_ioctl+0x48e/0xc80 [ 1978.092514] mon_bin_ioctl+0x4ad/0xc80 [ 1978.092532] ? mon_bin_get_event+0x450/0x450 [ 1978.092548] ? __fget+0x340/0x540 [ 1978.092568] ? ___might_sleep+0x163/0x280 [ 1978.145105] ? __might_sleep+0x95/0x190 [ 1978.149118] ? mon_bin_get_event+0x450/0x450 [ 1978.153568] do_vfs_ioctl+0xd6e/0x1390 [ 1978.157499] ? selinux_file_ioctl+0x46f/0x5e0 [ 1978.162026] ? selinux_file_ioctl+0x125/0x5e0 [ 1978.162047] ? ioctl_preallocate+0x210/0x210 [ 1978.162060] ? selinux_file_mprotect+0x620/0x620 [ 1978.162083] ? iterate_fd+0x360/0x360 [ 1978.162104] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1978.162124] ? fput+0x128/0x1a0 [ 1978.171082] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1978.171102] ? security_file_ioctl+0x93/0xc0 [ 1978.171125] ksys_ioctl+0xab/0xd0 [ 1978.171143] __x64_sys_ioctl+0x73/0xb0 [ 1978.171160] do_syscall_64+0x103/0x610 [ 1978.171181] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1978.171193] RIP: 0033:0x458da9 [ 1978.171210] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1978.171217] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1978.244992] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1978.252296] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1978.259613] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1978.266943] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1978.274242] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000080)="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") getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040), &(0x7f00000001c0)=0x4) prctl$PR_SVE_SET_VL(0x32, 0x306e2) 17:16:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x7a00, 0x0, 0x0, 0x0}) 17:16:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x4800000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x6c00, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:05 executing program 2 (fault-call:3 fault-nth:16): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) [ 1978.740190] FAULT_INJECTION: forcing a failure. [ 1978.740190] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1978.758037] CPU: 0 PID: 6081 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1978.764947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1978.774342] Call Trace: [ 1978.776971] dump_stack+0x172/0x1f0 [ 1978.780641] should_fail.cold+0xa/0x1b [ 1978.784566] ? fault_create_debugfs_attr+0x1e0/0x1e0 17:16:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0xfc00, 0x0, 0x0, 0x0}) 17:16:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x7000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1978.789692] ? ___might_sleep+0x163/0x280 [ 1978.793878] ? __might_sleep+0x95/0x190 [ 1978.797885] __alloc_pages_nodemask+0x1ee/0x760 [ 1978.802686] ? fs_reclaim_acquire+0x20/0x20 [ 1978.807062] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1978.812811] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1978.817896] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1978.823491] alloc_pages_current+0x107/0x210 [ 1978.827957] get_zeroed_page+0x14/0x50 [ 1978.831878] mon_alloc_buff+0xc2/0x190 [ 1978.835802] ? mon_bin_ioctl+0x48e/0xc80 [ 1978.839904] mon_bin_ioctl+0x4ad/0xc80 [ 1978.843834] ? mon_bin_get_event+0x450/0x450 [ 1978.848273] ? __fget+0x340/0x540 [ 1978.851762] ? ___might_sleep+0x163/0x280 [ 1978.855938] ? __might_sleep+0x95/0x190 [ 1978.859957] ? mon_bin_get_event+0x450/0x450 [ 1978.864692] do_vfs_ioctl+0xd6e/0x1390 [ 1978.868704] ? selinux_file_ioctl+0x46f/0x5e0 [ 1978.873235] ? selinux_file_ioctl+0x125/0x5e0 [ 1978.877776] ? ioctl_preallocate+0x210/0x210 [ 1978.882219] ? selinux_file_mprotect+0x620/0x620 [ 1978.887014] ? iterate_fd+0x360/0x360 [ 1978.890856] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1978.896606] ? fput+0x128/0x1a0 [ 1978.899922] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1978.905494] ? security_file_ioctl+0x93/0xc0 [ 1978.909935] ksys_ioctl+0xab/0xd0 [ 1978.913416] __x64_sys_ioctl+0x73/0xb0 [ 1978.917348] do_syscall_64+0x103/0x610 [ 1978.921275] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1978.926497] RIP: 0033:0x458da9 17:16:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x7400, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1978.929726] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1978.948834] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1978.956585] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1978.963884] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1978.963894] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1978.963902] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1978.963909] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x200000, 0x0, 0x0, 0x0}) 17:16:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x4c00000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1, &(0x7f0000000300)="0adc1f12340000319bd070dd1233fe954479f4341d535f91a660043ef8191059365123de09db7339fb1efa84b2b71f9813c9596f90d3607edbf6bdc16151619b621ec9070000000000009cccd8975de1650e857d3dd9d594146077d912365fa2213b640d6ce62e08670ac8b930d2430422e49f03000000ea6fe54f7cb7700cd97e4db0dc161003d5f3e29262d9ce71530f4e5b87f40663f27871b9e0420241dced057e7724d64d72426fea725bb2cf50c28932de1c9f69ba9344b12a1e582977d8faeb41b6643be2462436aa62eba4f77a692cf9c7dd7151") syz_execute_func(&(0x7f0000000080)="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") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e23, 0x5, @local, 0x3}, {0xa, 0x4e24, 0x200, @rand_addr="dd1cd3255f6de23e985900f1fb9a1d60", 0x3}, 0x6ff, [0x100, 0xca, 0x9, 0xcb32, 0x6, 0x5, 0x1f80000000, 0x400]}, 0x5c) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x20200) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000040)={0x1, r2}) 17:16:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x7a00, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x5d00000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:06 executing program 2 (fault-call:3 fault-nth:17): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:06 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x3, 0x400) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000000c0)={{0x3, 0x0, 0x5, 0x0, 0x7}, 0x10000, 0x50, 0x2}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000040)) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x440400, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x1000000, 0x0, 0x0, 0x0}) 17:16:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0xac00, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x6000000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x2000000, 0x0, 0x0, 0x0}) [ 1979.971480] FAULT_INJECTION: forcing a failure. [ 1979.971480] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1980.040914] CPU: 1 PID: 6132 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1980.047826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1980.057216] Call Trace: [ 1980.059849] dump_stack+0x172/0x1f0 [ 1980.063546] should_fail.cold+0xa/0x1b [ 1980.067486] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1980.072634] ? ___might_sleep+0x163/0x280 [ 1980.076818] ? __might_sleep+0x95/0x190 [ 1980.080824] __alloc_pages_nodemask+0x1ee/0x760 [ 1980.080843] ? fs_reclaim_acquire+0x20/0x20 [ 1980.080863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1980.080881] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1980.100672] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1980.106263] alloc_pages_current+0x107/0x210 [ 1980.110734] get_zeroed_page+0x14/0x50 [ 1980.114672] mon_alloc_buff+0xc2/0x190 [ 1980.118592] ? mon_bin_ioctl+0x48e/0xc80 [ 1980.122688] mon_bin_ioctl+0x4ad/0xc80 [ 1980.126632] ? mon_bin_get_event+0x450/0x450 [ 1980.131154] ? __fget+0x340/0x540 [ 1980.134634] ? ___might_sleep+0x163/0x280 [ 1980.138808] ? __might_sleep+0x95/0x190 [ 1980.142815] ? mon_bin_get_event+0x450/0x450 [ 1980.147265] do_vfs_ioctl+0xd6e/0x1390 [ 1980.151374] ? selinux_file_ioctl+0x46f/0x5e0 [ 1980.155906] ? selinux_file_ioctl+0x125/0x5e0 [ 1980.160441] ? ioctl_preallocate+0x210/0x210 [ 1980.164885] ? selinux_file_mprotect+0x620/0x620 [ 1980.169740] ? iterate_fd+0x360/0x360 [ 1980.173586] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1980.179166] ? fput+0x128/0x1a0 [ 1980.182497] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 17:16:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x400000) accept4$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14, 0x800) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000080)={0x3, 0x1}) ioctl(r0, 0x0, &(0x7f00000002c0)="0adcbff703f597b71868ce27d68fb3521f123c123f319bd070") r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) write$selinux_create(r2, &(0x7f0000000140)=@objname={'system_u:object_r:removable_device_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x0, 0x20, './file0\x00'}, 0x5c) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$SG_IO(r3, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000080)=0x7fff) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0xffffffff80000000, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}) [ 1980.188077] ? security_file_ioctl+0x93/0xc0 [ 1980.192532] ksys_ioctl+0xab/0xd0 [ 1980.196029] __x64_sys_ioctl+0x73/0xb0 [ 1980.199956] do_syscall_64+0x103/0x610 [ 1980.204150] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1980.209375] RIP: 0033:0x458da9 [ 1980.212614] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1980.212624] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:16:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x3000000, 0x0, 0x0, 0x0}) [ 1980.212641] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1980.212650] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1980.212659] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1980.212669] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1980.212677] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:08 executing program 2 (fault-call:3 fault-nth:18): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x6800000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x200000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x4000000, 0x0, 0x0, 0x0}) 17:16:08 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80400, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f00000001c0)=""/59) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000080)="984a2ae92c7e964c0f05bf04004000c4a37bf0c50341e2e9c421e5741c14c4e3f963f0360f383a9e020000000f0d2046205032d2e5d24b264b2638091e8f897c80443f004583eab1d19a0080000031f3bf7ec4e10bfa0bfa0f3a412935f2f045f61964f000030f42d2c461755575cec4a2adb96d42262e2e66450f7d64c60865f2ad4865f20f7cd8efa1a12ad764d38f53efc4211de34f006766f2ab440fec3f66f3adc4c162b1f72e2ec489309271d8d8000000000fc4634148f70000c2c461ab59642dcbc481cb5ac736b2aa66450fc4650000d3da43a171dd4ecdcda2660f38346800c4e3295d36d8e5c422b5abf37d75c4426507af0f000000a2a25fd25cf3460f2aabee320f7ba5a9a50000ff2ef2af79ca553131fb260f9159073b62") openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x101440, 0x0) 17:16:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0x9, &(0x7f0000000040)='vboxnet0\x00', 0xffffffffffffffff}, 0x30) fcntl$setown(r0, 0x8, r1) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1980.976328] scsi_io_completion_action: 31 callbacks suppressed [ 1980.976363] sd 0:0:1:0: [sg0] tag#295 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1980.991331] sd 0:0:1:0: [sg0] tag#295 CDB: opcode=0xe5 (vendor) [ 1980.997471] sd 0:0:1:0: [sg0] tag#295 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1981.001018] sd 0:0:1:0: [sg0] tag#345 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1981.006355] sd 0:0:1:0: [sg0] tag#295 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 17:16:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1981.015145] sd 0:0:1:0: [sg0] tag#345 CDB: opcode=0xe5 (vendor) [ 1981.023950] sd 0:0:1:0: [sg0] tag#295 CDB[20]: a0 [ 1981.035235] sd 0:0:1:0: [sg0] tag#345 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1981.044266] sd 0:0:1:0: [sg0] tag#345 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1981.053680] sd 0:0:1:0: [sg0] tag#345 CDB[20]: a0 [ 1981.076406] FAULT_INJECTION: forcing a failure. [ 1981.076406] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1981.094736] sd 0:0:1:0: [sg0] tag#345 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1981.103558] sd 0:0:1:0: [sg0] tag#345 CDB: opcode=0xe5 (vendor) [ 1981.109817] sd 0:0:1:0: [sg0] tag#345 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1981.119970] sd 0:0:1:0: [sg0] tag#345 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1981.129225] sd 0:0:1:0: [sg0] tag#345 CDB[20]: a0 [ 1981.159836] CPU: 1 PID: 6179 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1981.166747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1981.176229] Call Trace: [ 1981.178863] dump_stack+0x172/0x1f0 [ 1981.182536] should_fail.cold+0xa/0x1b [ 1981.186465] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1981.191599] ? ___might_sleep+0x163/0x280 [ 1981.195781] ? __might_sleep+0x95/0x190 [ 1981.199825] __alloc_pages_nodemask+0x1ee/0x760 [ 1981.199845] ? fs_reclaim_acquire+0x20/0x20 [ 1981.199863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1981.199895] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1981.199920] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1981.199941] alloc_pages_current+0x107/0x210 [ 1981.199958] get_zeroed_page+0x14/0x50 [ 1981.199971] mon_alloc_buff+0xc2/0x190 [ 1981.199983] ? mon_bin_ioctl+0x48e/0xc80 [ 1981.199999] mon_bin_ioctl+0x4ad/0xc80 [ 1981.200023] ? mon_bin_get_event+0x450/0x450 [ 1981.233470] ? __fget+0x340/0x540 [ 1981.233493] ? ___might_sleep+0x163/0x280 [ 1981.233511] ? __might_sleep+0x95/0x190 [ 1981.261366] ? mon_bin_get_event+0x450/0x450 [ 1981.265817] do_vfs_ioctl+0xd6e/0x1390 [ 1981.269738] ? selinux_file_ioctl+0x46f/0x5e0 [ 1981.274287] ? selinux_file_ioctl+0x125/0x5e0 [ 1981.278788] sd 0:0:1:0: [sg0] tag#345 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1981.279086] ? ioctl_preallocate+0x210/0x210 [ 1981.288014] sd 0:0:1:0: [sg0] tag#345 CDB: opcode=0xe5 (vendor) [ 1981.292149] ? selinux_file_mprotect+0x620/0x620 [ 1981.292175] ? iterate_fd+0x360/0x360 [ 1981.292195] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1981.292217] ? fput+0x128/0x1a0 [ 1981.292240] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1981.298328] sd 0:0:1:0: [sg0] tag#345 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1981.303101] ? security_file_ioctl+0x93/0xc0 [ 1981.303122] ksys_ioctl+0xab/0xd0 [ 1981.303142] __x64_sys_ioctl+0x73/0xb0 [ 1981.303159] do_syscall_64+0x103/0x610 [ 1981.303179] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1981.303191] RIP: 0033:0x458da9 [ 1981.303216] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 17:16:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x6c00000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x5000000, 0x0, 0x0, 0x0}) 17:16:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x1000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1981.303230] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 [ 1981.307050] sd 0:0:1:0: [sg0] tag#345 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1981.312572] ORIG_RAX: 0000000000000010 [ 1981.312582] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1981.312589] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1981.312596] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1981.312603] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 17:16:08 executing program 2 (fault-call:3 fault-nth:19): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) [ 1981.312610] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 [ 1981.376977] sd 0:0:1:0: [sg0] tag#314 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1981.379381] sd 0:0:1:0: [sg0] tag#345 CDB[20]: a0 [ 1981.393380] sd 0:0:1:0: [sg0] tag#314 CDB: opcode=0xe5 (vendor) [ 1981.430275] sd 0:0:1:0: [sg0] tag#314 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1981.430294] sd 0:0:1:0: [sg0] tag#314 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1981.430309] sd 0:0:1:0: [sg0] tag#314 CDB[20]: a0 17:16:08 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x480, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x40, 0x5d5, 0x2, 0x7ff, 0x80}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x100000890f, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1981.437154] sd 0:0:1:0: [sg0] tag#314 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1981.481376] sd 0:0:1:0: [sg0] tag#314 CDB: opcode=0xe5 (vendor) [ 1981.487797] sd 0:0:1:0: [sg0] tag#314 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1981.496686] sd 0:0:1:0: [sg0] tag#314 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1981.496704] sd 0:0:1:0: [sg0] tag#314 CDB[20]: a0 [ 1981.521242] FAULT_INJECTION: forcing a failure. [ 1981.521242] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1981.566660] CPU: 0 PID: 6202 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1981.573570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1981.582956] Call Trace: [ 1981.585581] dump_stack+0x172/0x1f0 [ 1981.589248] should_fail.cold+0xa/0x1b [ 1981.593178] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1981.598311] ? ___might_sleep+0x163/0x280 [ 1981.602517] ? __might_sleep+0x95/0x190 [ 1981.606538] __alloc_pages_nodemask+0x1ee/0x760 [ 1981.611244] ? fs_reclaim_acquire+0x20/0x20 [ 1981.615598] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1981.621171] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1981.626248] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1981.631827] alloc_pages_current+0x107/0x210 [ 1981.636277] get_zeroed_page+0x14/0x50 [ 1981.640237] mon_alloc_buff+0xc2/0x190 [ 1981.644189] ? mon_bin_ioctl+0x48e/0xc80 [ 1981.648291] mon_bin_ioctl+0x4ad/0xc80 [ 1981.652335] ? mon_bin_get_event+0x450/0x450 [ 1981.656776] ? __fget+0x340/0x540 [ 1981.660261] ? ___might_sleep+0x163/0x280 [ 1981.664444] ? __might_sleep+0x95/0x190 [ 1981.668455] ? mon_bin_get_event+0x450/0x450 [ 1981.672903] do_vfs_ioctl+0xd6e/0x1390 [ 1981.676820] ? selinux_file_ioctl+0x46f/0x5e0 [ 1981.681356] ? selinux_file_ioctl+0x125/0x5e0 [ 1981.685900] ? ioctl_preallocate+0x210/0x210 [ 1981.690347] ? selinux_file_mprotect+0x620/0x620 [ 1981.690375] ? iterate_fd+0x360/0x360 [ 1981.690400] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1981.704534] ? fput+0x128/0x1a0 [ 1981.707861] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1981.716027] ? security_file_ioctl+0x93/0xc0 [ 1981.716049] ksys_ioctl+0xab/0xd0 [ 1981.716068] __x64_sys_ioctl+0x73/0xb0 [ 1981.716087] do_syscall_64+0x103/0x610 [ 1981.716107] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1981.716120] RIP: 0033:0x458da9 17:16:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r2 = dup3(r0, r1, 0x80000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r3, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6ed}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x29}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x67}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x9) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x7000000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x2000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x6000000, 0x0, 0x0, 0x0}) [ 1981.716137] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1981.716153] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 [ 1981.770376] ORIG_RAX: 0000000000000010 [ 1981.770388] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1981.770395] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1981.770402] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1981.770408] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1981.770415] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 [ 1981.847925] sd 0:0:1:0: [sg0] tag#345 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1981.856874] sd 0:0:1:0: [sg0] tag#345 CDB: opcode=0xe5 (vendor) [ 1981.863070] sd 0:0:1:0: [sg0] tag#345 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1981.865654] sd 0:0:1:0: [sg0] tag#314 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1981.871953] sd 0:0:1:0: [sg0] tag#345 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1981.880713] sd 0:0:1:0: [sg0] tag#314 CDB: opcode=0xe5 (vendor) [ 1981.880736] sd 0:0:1:0: [sg0] tag#314 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1981.889513] sd 0:0:1:0: [sg0] tag#345 CDB[20]: a0 [ 1981.895708] sd 0:0:1:0: [sg0] tag#314 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1981.918381] sd 0:0:1:0: [sg0] tag#314 CDB[20]: a0 [ 1981.944168] sd 0:0:1:0: [sg0] tag#345 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1981.953350] sd 0:0:1:0: [sg0] tag#345 CDB: opcode=0xe5 (vendor) [ 1981.959465] sd 0:0:1:0: [sg0] tag#345 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1981.968447] sd 0:0:1:0: [sg0] tag#345 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1981.977306] sd 0:0:1:0: [sg0] tag#345 CDB[20]: a0 17:16:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000300)="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") 17:16:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1020001, 0x4) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x7000000, 0x0, 0x0, 0x0}) 17:16:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x7400000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x3000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:09 executing program 2 (fault-call:3 fault-nth:20): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) [ 1982.091588] sd 0:0:1:0: [sg0] tag#346 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1982.100440] sd 0:0:1:0: [sg0] tag#346 CDB: opcode=0xe5 (vendor) [ 1982.106767] sd 0:0:1:0: [sg0] tag#346 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1982.115757] sd 0:0:1:0: [sg0] tag#346 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1982.124637] sd 0:0:1:0: [sg0] tag#346 CDB[20]: a0 17:16:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x400, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000000c0)={0x3, 0x7, &(0x7f0000000080)="f595ee12b9715f"}) bind$can_raw(r1, &(0x7f0000000100), 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x7a00000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1982.295470] FAULT_INJECTION: forcing a failure. [ 1982.295470] name fail_page_alloc, interval 1, probability 0, space 0, times 0 17:16:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x8000000, 0x0, 0x0, 0x0}) [ 1982.356329] CPU: 1 PID: 6246 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1982.363257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1982.372633] Call Trace: [ 1982.375267] dump_stack+0x172/0x1f0 [ 1982.378928] should_fail.cold+0xa/0x1b [ 1982.382846] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1982.387978] ? ___might_sleep+0x163/0x280 [ 1982.392160] ? __might_sleep+0x95/0x190 [ 1982.396157] __alloc_pages_nodemask+0x1ee/0x760 [ 1982.400847] ? check_preemption_disabled+0x48/0x290 [ 1982.400870] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1982.400897] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1982.400917] alloc_pages_current+0x107/0x210 [ 1982.400937] get_zeroed_page+0x14/0x50 [ 1982.400953] mon_alloc_buff+0xc2/0x190 [ 1982.400966] ? mon_bin_ioctl+0x48e/0xc80 [ 1982.400986] mon_bin_ioctl+0x4ad/0xc80 [ 1982.411234] ? mon_bin_get_event+0x450/0x450 [ 1982.411250] ? __fget+0x340/0x540 [ 1982.411266] ? ___might_sleep+0x163/0x280 [ 1982.411281] ? __might_sleep+0x95/0x190 [ 1982.411295] ? mon_bin_get_event+0x450/0x450 [ 1982.411323] do_vfs_ioctl+0xd6e/0x1390 [ 1982.411340] ? selinux_file_ioctl+0x46f/0x5e0 [ 1982.411353] ? selinux_file_ioctl+0x125/0x5e0 [ 1982.411371] ? ioctl_preallocate+0x210/0x210 [ 1982.411384] ? selinux_file_mprotect+0x620/0x620 [ 1982.411406] ? iterate_fd+0x360/0x360 [ 1982.411427] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1982.411446] ? fput+0x128/0x1a0 [ 1982.492278] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1982.497864] ? security_file_ioctl+0x93/0xc0 [ 1982.502328] ksys_ioctl+0xab/0xd0 [ 1982.505999] __x64_sys_ioctl+0x73/0xb0 [ 1982.509926] do_syscall_64+0x103/0x610 [ 1982.514200] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1982.519431] RIP: 0033:0x458da9 [ 1982.522647] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1982.541583] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1982.549361] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 17:16:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0xfeffffff00000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0xfffffff, 0x0, 0x0, 0x0}) 17:16:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x4000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1982.556771] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1982.564098] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1982.571404] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1982.578788] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:10 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000080)="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") 17:16:10 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) r1 = accept$inet6(r0, 0x0, &(0x7f0000000240)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000880)={r3, 0xe7}, &(0x7f00000008c0)=0x8) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r4 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x800, 0x0) ioctl$SG_IO(r4, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f0000000100)={0x100000000, 0x9240438f7de37960, 0x4, 0x1, {0x77359400}, {0x1, 0xd, 0x8001, 0x81, 0xd3ce, 0x7, "b5d33fae"}, 0x6, 0x1, @userptr=0x2, 0x4}) ioctl$KVM_GET_NR_MMU_PAGES(r5, 0xae45, 0x9) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000380)) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000900)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000008004000018010000980300005802000098030000980300009803000004000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000d4b1ebb50800"/64], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0001801000000000000000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000140000000803000000000000ffffffffac14140a00000000ffffffff000000000000000000000000000000000000000000000000ff00ffb60000000000000000000000000180c200000f000000000000000000000000000000000000ffffffffffff0000000000000000000000070006000100060081fc01626f6e645f736c6176655f31000000006361696630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000aaaaaaaaaa13000000000000000000000000000000000000000000000000000000000000ac1e01010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000000000000000000000000000000000000180c200000200000000000000000000ac141417e000000101000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff0000000045ad37ea231ecb8c5e69a93f6d56"], 0x4d0) 17:16:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0xffffff0f00000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x5000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x10000000, 0x0, 0x0, 0x0}) 17:16:10 executing program 2 (fault-call:3 fault-nth:21): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x325002, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000080)={{0x1f, 0x4, 0x3d98, 0x80, 0x1f, 0x7}, 0x8}) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f00000000c0)=0x8db, 0x4) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1983.051549] FAULT_INJECTION: forcing a failure. [ 1983.051549] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1983.077002] CPU: 1 PID: 6286 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1983.083931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1983.093326] Call Trace: [ 1983.095952] dump_stack+0x172/0x1f0 [ 1983.099711] should_fail.cold+0xa/0x1b [ 1983.103642] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1983.108779] ? ___might_sleep+0x163/0x280 [ 1983.112950] ? __might_sleep+0x95/0x190 [ 1983.112970] __alloc_pages_nodemask+0x1ee/0x760 [ 1983.112986] ? fs_reclaim_acquire+0x20/0x20 [ 1983.113002] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1983.113017] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1983.113041] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1983.113060] alloc_pages_current+0x107/0x210 [ 1983.113079] get_zeroed_page+0x14/0x50 17:16:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet6_dccp_int(r2, 0x21, 0x0, &(0x7f0000000080)=0x1, 0x4) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1983.113100] mon_alloc_buff+0xc2/0x190 [ 1983.154651] ? mon_bin_ioctl+0x48e/0xc80 [ 1983.158755] mon_bin_ioctl+0x4ad/0xc80 [ 1983.162689] ? mon_bin_get_event+0x450/0x450 [ 1983.167131] ? __fget+0x340/0x540 [ 1983.170618] ? ___might_sleep+0x163/0x280 [ 1983.174800] ? __might_sleep+0x95/0x190 [ 1983.178807] ? mon_bin_get_event+0x450/0x450 [ 1983.183281] do_vfs_ioctl+0xd6e/0x1390 [ 1983.187221] ? selinux_file_ioctl+0x46f/0x5e0 [ 1983.191742] ? selinux_file_ioctl+0x125/0x5e0 [ 1983.191762] ? ioctl_preallocate+0x210/0x210 17:16:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0xffffff7f00000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1983.191773] ? selinux_file_mprotect+0x620/0x620 [ 1983.191794] ? iterate_fd+0x360/0x360 [ 1983.191813] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1983.191826] ? fput+0x128/0x1a0 [ 1983.191845] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1983.191861] ? security_file_ioctl+0x93/0xc0 [ 1983.191877] ksys_ioctl+0xab/0xd0 [ 1983.191895] __x64_sys_ioctl+0x73/0xb0 [ 1983.191914] do_syscall_64+0x103/0x610 [ 1983.191935] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1983.191953] RIP: 0033:0x458da9 [ 1983.231699] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1983.266803] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1983.266822] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1983.266829] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1983.266835] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 17:16:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x1f000000, 0x0, 0x0, 0x0}) 17:16:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x6000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:10 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0xa9}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r1, 0x4, 0x30}, &(0x7f00000001c0)=0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x40000100000000, &(0x7f00000000c0)="0a000000bc000000000000") r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x214001) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000040)=0x6, 0x4) ioctl$SG_IO(r3, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1983.266842] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1983.266849] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f00000006c0)="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") r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x2, 0x10200) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) 17:16:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0xffffffffffffffff, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x7000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x20000000, 0x0, 0x0, 0x0}) 17:16:11 executing program 2 (fault-call:3 fault-nth:22): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) [ 1984.070532] FAULT_INJECTION: forcing a failure. [ 1984.070532] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1984.114766] CPU: 1 PID: 6320 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1984.121692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1984.131077] Call Trace: [ 1984.133710] dump_stack+0x172/0x1f0 [ 1984.137380] should_fail.cold+0xa/0x1b [ 1984.141296] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1984.146432] ? ___might_sleep+0x163/0x280 [ 1984.150694] ? __might_sleep+0x95/0x190 [ 1984.154702] __alloc_pages_nodemask+0x1ee/0x760 [ 1984.159397] ? fs_reclaim_acquire+0x20/0x20 [ 1984.163737] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1984.163757] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1984.163784] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1984.174459] alloc_pages_current+0x107/0x210 [ 1984.174481] get_zeroed_page+0x14/0x50 [ 1984.174496] mon_alloc_buff+0xc2/0x190 [ 1984.174507] ? mon_bin_ioctl+0x48e/0xc80 [ 1984.174523] mon_bin_ioctl+0x4ad/0xc80 [ 1984.174542] ? mon_bin_get_event+0x450/0x450 [ 1984.204689] ? __fget+0x340/0x540 [ 1984.208172] ? ___might_sleep+0x163/0x280 [ 1984.212362] ? __might_sleep+0x95/0x190 [ 1984.212384] ? mon_bin_get_event+0x450/0x450 [ 1984.212403] do_vfs_ioctl+0xd6e/0x1390 [ 1984.212420] ? selinux_file_ioctl+0x46f/0x5e0 [ 1984.212432] ? selinux_file_ioctl+0x125/0x5e0 [ 1984.212450] ? ioctl_preallocate+0x210/0x210 [ 1984.212467] ? selinux_file_mprotect+0x620/0x620 [ 1984.242927] ? iterate_fd+0x360/0x360 [ 1984.246772] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1984.252356] ? fput+0x128/0x1a0 [ 1984.255683] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1984.261260] ? security_file_ioctl+0x93/0xc0 [ 1984.265707] ksys_ioctl+0xab/0xd0 [ 1984.269191] __x64_sys_ioctl+0x73/0xb0 [ 1984.273140] do_syscall_64+0x103/0x610 [ 1984.277055] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1984.282360] RIP: 0033:0x458da9 [ 1984.285571] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1984.304492] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:16:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x10, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x8000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x3, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000001400)={&(0x7f0000ffc000/0x3000)=nil, 0x9, 0x7, 0x6, &(0x7f0000ffc000/0x4000)=nil, 0x80000000}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x100000001, 0xf0e, 0x1000, 0x200}) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$SG_IO(0xffffffffffffffff, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @scatter={0x5, 0x0, &(0x7f0000001380)=[{&(0x7f00000000c0)=""/159, 0x9f}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000180)=""/100, 0x64}, {&(0x7f0000000200)=""/58, 0x3a}, {&(0x7f0000000240)=""/155, 0x9b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000001440)=""/96) 17:16:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x48000000, 0x0, 0x0, 0x0}) 17:16:11 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) syz_execute_func(&(0x7f0000000080)="984a2ae92c7e964c0f05bf04004000c4a37bf0c50341e2e9c421e5741c14c4e3f963f0360f383a9e020000000f0d2046205032d2e5d24b264b2638091e8f897c80443f004583eab1d19a0080000031f3bf7ec4e10bfa0bfa0f3a412935f2f045f61964f000030f42d2c461755575cec4a2adb96d42262e2e66450f7d64c60865f2ad4865f20f7cd8efa1a12ad764d38f53efc4211de34f006766f2ab440fec3f66f3adc4c162b1f72e2ec489309271d8d8000000000fc4634148f70000c2c461ab59642dcbc481cb5ac736b2aa66450fc4650000d3da43a171dd4ecdcda2660f38346800c4e3295d36d8e5c422b5abf37d75c4426507af0f000000a2a25fd25cf3460f2aabee320f7ba5a9a50000ff2ef2af79ca553131fb260f9159073b62") [ 1984.312260] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1984.319569] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1984.319585] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1984.334175] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1984.341472] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0xfffffff, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:11 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x659e, 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1, 0x1, 0x9}) 17:16:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x61, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x4c000000, 0x0, 0x0, 0x0}) 17:16:11 executing program 2 (fault-call:3 fault-nth:23): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x20000121, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x1f000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:11 executing program 3: r0 = socket(0x2, 0x3, 0x8001) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)="a424423c98e687f52c2111cc07f5e5e0fb61fa6043c0598733a50ad66522cb7c6ecb589f9837ae3e321a9e7520e9b32c35c73773a03107ffedff266c23a18101c5a9f9d11f57a2b393fa3b07d49cf3d01dca8ebb24b703b81cc9") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x60000000, 0x0, 0x0, 0x0}) [ 1984.720968] FAULT_INJECTION: forcing a failure. [ 1984.720968] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1984.784490] CPU: 1 PID: 6374 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1984.791434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1984.800819] Call Trace: [ 1984.803458] dump_stack+0x172/0x1f0 [ 1984.807178] should_fail.cold+0xa/0x1b [ 1984.811119] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1984.816271] ? ___might_sleep+0x163/0x280 [ 1984.820464] ? __might_sleep+0x95/0x190 [ 1984.824479] __alloc_pages_nodemask+0x1ee/0x760 [ 1984.829183] ? check_preemption_disabled+0x48/0x290 [ 1984.834249] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1984.839325] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1984.844911] alloc_pages_current+0x107/0x210 [ 1984.849375] get_zeroed_page+0x14/0x50 [ 1984.853306] mon_alloc_buff+0xc2/0x190 [ 1984.857390] ? mon_bin_ioctl+0x48e/0xc80 [ 1984.861486] mon_bin_ioctl+0x4ad/0xc80 [ 1984.865406] ? mon_bin_get_event+0x450/0x450 [ 1984.869845] ? __fget+0x340/0x540 [ 1984.873350] ? ___might_sleep+0x163/0x280 [ 1984.877557] ? __might_sleep+0x95/0x190 [ 1984.881566] ? mon_bin_get_event+0x450/0x450 [ 1984.886016] do_vfs_ioctl+0xd6e/0x1390 [ 1984.889959] ? selinux_file_ioctl+0x46f/0x5e0 [ 1984.894485] ? selinux_file_ioctl+0x125/0x5e0 [ 1984.899028] ? ioctl_preallocate+0x210/0x210 [ 1984.903479] ? selinux_file_mprotect+0x620/0x620 [ 1984.908281] ? iterate_fd+0x360/0x360 [ 1984.912152] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1984.917751] ? fput+0x128/0x1a0 [ 1984.921081] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1984.926661] ? security_file_ioctl+0x93/0xc0 [ 1984.931120] ksys_ioctl+0xab/0xd0 [ 1984.934620] __x64_sys_ioctl+0x73/0xb0 [ 1984.938544] do_syscall_64+0x103/0x610 [ 1984.942470] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1984.947691] RIP: 0033:0x458da9 [ 1984.950910] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1984.970011] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1984.977756] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 17:16:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x3f000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000080)) [ 1984.985054] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1984.992458] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1984.999931] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1985.007242] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x6c) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000200)={0x18, &(0x7f00000001c0)="2651c3c443611531a5800a7a3d68b9e059ef516ced6425a0"}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000080)="984a2ae92c7e964c0f05bf04004000c4a37bf0c50341e2e9c421e5741c14c4e3f963f0360f383a9e020000000f0d2046205032d2e5d24b264b2638091e8f897c80443f004583eab1d19a0080000031f3bf7ec4e10bfa0bfa0f3a412935f2f045f61964f000030f42d2c461755575cec4a2adb96d42262e2e66450f7d64c60865f2ad4865f20f7cd8efa1a12ad764d38f53efc4211de34f006766f2ab440fec3f66f3adc4c162b1f72e2ec489309271d8d8000000000fc4634148f70000c2c461ab59642dcbc481cb5ac736b2aa66450fc4650000d3da43a171dd4ecdcda2660f38346800c4e3295d36d8e5c422b5abf37d75c4426507af0f000000a2a25fd25cf3460f2aabee320f7ba5a9a50000ff2ef2af79ca553131fb260f9159073b62") setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x450, 0x268, 0x150, 0x0, 0x0, 0x150, 0x3b8, 0x3b8, 0x3b8, 0x3b8, 0x3b8, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0xf, 0x100000001, 0x20000000000000, 0x1}}, @common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x4, 0x401, 0x0, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x10000, 0xe, [0x1a, 0x36, 0x2a, 0x38, 0x21, 0x23, 0x23, 0xa, 0x2c, 0x28, 0x2, 0x28, 0x36, 0x2, 0x2d, 0x8], 0x2, 0x1, 0x100000001}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x10001, 0x6, 0x1}}, @common=@ttl={0x28, 'ttl\x00', 0x0, {0x2, 0xffffffff}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x110, 0x150, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x0, 0x4}}, @common=@icmp={0x28, 'icmp\x00', 0x0, {0xd, 0x0, 0x8, 0x1}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "1bfe5284f00ceb7e4133104b38c51e47b5dc3283c2c22a030e013d02b17b"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) 17:16:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x48000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x2, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x68000000, 0x0, 0x0, 0x0}) 17:16:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x2000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0x5}, @sack_perm, @mss={0x2, 0x24000000}, @mss], 0x4) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f0000000180)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={@dev={0xfe, 0x80, [], 0xc}, 0x33, r2}) ioctl$SG_IO(0xffffffffffffffff, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:12 executing program 2 (fault-call:3 fault-nth:24): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x3, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x4c000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x6c000000, 0x0, 0x0, 0x0}) 17:16:12 executing program 3: rt_sigprocmask(0x2, &(0x7f00000000c0)={0x9e}, &(0x7f0000000100), 0x8) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x90000, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x40, 0x1, 0x7}}, 0x14) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x4, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x70000000, 0x0, 0x0, 0x0}) [ 1985.631181] FAULT_INJECTION: forcing a failure. [ 1985.631181] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1985.720540] CPU: 0 PID: 6443 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1985.727470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1985.736856] Call Trace: [ 1985.739487] dump_stack+0x172/0x1f0 [ 1985.743256] should_fail.cold+0xa/0x1b [ 1985.747185] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1985.752335] ? ___might_sleep+0x163/0x280 [ 1985.756519] ? __might_sleep+0x95/0x190 [ 1985.760526] __alloc_pages_nodemask+0x1ee/0x760 [ 1985.765221] ? fs_reclaim_acquire+0x20/0x20 [ 1985.769582] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1985.775151] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1985.780219] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1985.785970] alloc_pages_current+0x107/0x210 [ 1985.790508] get_zeroed_page+0x14/0x50 [ 1985.794447] mon_alloc_buff+0xc2/0x190 [ 1985.798366] ? mon_bin_ioctl+0x48e/0xc80 [ 1985.802465] mon_bin_ioctl+0x4ad/0xc80 [ 1985.806397] ? mon_bin_get_event+0x450/0x450 [ 1985.810837] ? __fget+0x340/0x540 [ 1985.814350] ? ___might_sleep+0x163/0x280 [ 1985.818545] ? __might_sleep+0x95/0x190 [ 1985.823563] ? mon_bin_get_event+0x450/0x450 [ 1985.828012] do_vfs_ioctl+0xd6e/0x1390 [ 1985.831940] ? selinux_file_ioctl+0x46f/0x5e0 [ 1985.836469] ? selinux_file_ioctl+0x125/0x5e0 [ 1985.841013] ? ioctl_preallocate+0x210/0x210 [ 1985.845461] ? selinux_file_mprotect+0x620/0x620 [ 1985.850264] ? iterate_fd+0x360/0x360 [ 1985.854103] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1985.859678] ? fput+0x128/0x1a0 [ 1985.863003] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1985.868587] ? security_file_ioctl+0x93/0xc0 [ 1985.873045] ksys_ioctl+0xab/0xd0 [ 1985.876536] __x64_sys_ioctl+0x73/0xb0 [ 1985.880459] do_syscall_64+0x103/0x610 [ 1985.884469] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1985.889863] RIP: 0033:0x458da9 [ 1985.893082] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1985.912018] RSP: 002b:00007f9a65d93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1985.919777] RAX: ffffffffffffffda RBX: 00007f9a65d93c90 RCX: 0000000000458da9 [ 1985.927082] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000003 [ 1985.934389] RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000 [ 1985.941693] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65d946d4 [ 1985.949006] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000004 17:16:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000002c0)=ANY=[@ANYBLOB="c8d36dd24b0796e4b692fd66ce19929842f85ac71e978dbf9cbb4407a2c45061b52240da0bc6ad253d0d489f7f576d6a6211f7eb8c6be862eb5a1d9fa9cc9ed84aaef9903fa2d8a04e38ea6652efe861ab89bf8ecc0e96afa5b18768dddf22bca45d9581dcd04713a3dc01e6049c3894a91d5550accba35234eae30c4907460960fdc73b608c6ff502bb4c121685eeefff2eff5917bef3011213189849537f20b43c1a5a75528cb0042f7b2169795b78abcf03bef9aa4403862ddbf42f597792e9efbb"]) syz_execute_func(&(0x7f0000000080)="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") 17:16:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x68000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x800, 0x80) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x3, 0x3}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="98e15c9fd7feb81b31ea7992504868a1fd0463515b5e13ec44a4e819cffc4aff51de7480cafc69b61585f7e7f32266ecea99e0218b3788a3f0f69d6a0d3110efa1019d160f6808c58362b3e169e71242cc0c16442b2091f8f03585783924537412c34baf", 0x64}], 0x1, &(0x7f0000000380)="63b5b380e43778b133321cbcbf59f01c741fa48cd2d41aefa16ec33c40bf6dba853042440c72500ca5b9280984b8882606e4873cd5df4e68694e64379b69b254eb5f4d444a599385bd7bd53c20f27821f940aa3279638695d44a311e9701b32389d02248", 0x64, 0x20000010}, 0x4000041) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f00000000c0)=""/99) accept$ax25(r3, 0x0, &(0x7f0000000080)) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x5, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x74000000, 0x0, 0x0, 0x0}) 17:16:13 executing program 2 (fault-call:3 fault-nth:25): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) [ 1986.206516] scsi_io_completion_action: 35 callbacks suppressed [ 1986.206555] sd 0:0:1:0: [sg0] tag#373 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1986.209749] FAULT_INJECTION: forcing a failure. [ 1986.209749] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1986.212698] sd 0:0:1:0: [sg0] tag#373 CDB: opcode=0xe5 (vendor) [ 1986.212732] sd 0:0:1:0: [sg0] tag#373 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1986.212754] sd 0:0:1:0: [sg0] tag#373 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1986.239062] CPU: 1 PID: 6458 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1986.240098] sd 0:0:1:0: [sg0] tag#373 CDB[20]: a0 [ 1986.248740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1986.248748] Call Trace: [ 1986.248777] dump_stack+0x172/0x1f0 [ 1986.248797] should_fail.cold+0xa/0x1b [ 1986.248814] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1986.248828] ? ___might_sleep+0x163/0x280 [ 1986.248844] ? __might_sleep+0x95/0x190 [ 1986.248865] __alloc_pages_nodemask+0x1ee/0x760 [ 1986.264874] sd 0:0:1:0: [sg0] tag#373 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1986.269560] ? fs_reclaim_acquire+0x20/0x20 [ 1986.269581] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1986.269604] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1986.279077] sd 0:0:1:0: [sg0] tag#373 CDB: opcode=0xe5 (vendor) [ 1986.281608] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1986.281631] alloc_pages_current+0x107/0x210 [ 1986.281653] get_zeroed_page+0x14/0x50 [ 1986.285308] sd 0:0:1:0: [sg0] tag#373 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1986.289213] mon_alloc_buff+0xc2/0x190 [ 1986.294427] sd 0:0:1:0: [sg0] tag#373 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1986.298498] ? mon_bin_ioctl+0x48e/0xc80 [ 1986.302570] sd 0:0:1:0: [sg0] tag#373 CDB[20]: a0 [ 1986.307164] mon_bin_ioctl+0x4ad/0xc80 [ 1986.359371] ? mon_bin_get_event+0x450/0x450 [ 1986.372031] ? __fget+0x340/0x540 [ 1986.372052] ? ___might_sleep+0x163/0x280 [ 1986.372067] ? __might_sleep+0x95/0x190 [ 1986.372086] ? mon_bin_get_event+0x450/0x450 [ 1986.372109] do_vfs_ioctl+0xd6e/0x1390 [ 1986.409264] ? selinux_file_ioctl+0x46f/0x5e0 [ 1986.411667] sd 0:0:1:0: [sg0] tag#373 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1986.413809] ? selinux_file_ioctl+0x125/0x5e0 [ 1986.413832] ? ioctl_preallocate+0x210/0x210 [ 1986.413852] ? selinux_file_mprotect+0x620/0x620 [ 1986.422541] sd 0:0:1:0: [sg0] tag#373 CDB: opcode=0xe5 (vendor) [ 1986.426989] ? iterate_fd+0x360/0x360 [ 1986.431512] sd 0:0:1:0: [sg0] tag#373 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1986.436179] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1986.442343] sd 0:0:1:0: [sg0] tag#373 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1986.446062] ? fput+0x128/0x1a0 [ 1986.454912] sd 0:0:1:0: [sg0] tag#373 CDB[20]: a0 [ 1986.460394] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1986.482946] ? security_file_ioctl+0x93/0xc0 [ 1986.487412] ksys_ioctl+0xab/0xd0 [ 1986.490907] __x64_sys_ioctl+0x73/0xb0 [ 1986.494816] do_syscall_64+0x103/0x610 [ 1986.498727] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1986.503939] RIP: 0033:0x458da9 [ 1986.507157] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1986.526085] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1986.533830] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1986.541152] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1986.548455] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 17:16:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x7a000000, 0x0, 0x0, 0x0}) 17:16:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x6, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1986.555760] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1986.563052] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 [ 1986.601029] sd 0:0:1:0: [sg0] tag#378 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1986.609791] sd 0:0:1:0: [sg0] tag#378 CDB: opcode=0xe5 (vendor) [ 1986.616157] sd 0:0:1:0: [sg0] tag#378 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1986.625190] sd 0:0:1:0: [sg0] tag#378 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1986.629570] sd 0:0:1:0: [sg0] tag#391 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1986.634085] sd 0:0:1:0: [sg0] tag#378 CDB[20]: a0 17:16:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x6c000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1986.647937] sd 0:0:1:0: [sg0] tag#391 CDB: opcode=0xe5 (vendor) [ 1986.654196] sd 0:0:1:0: [sg0] tag#391 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1986.663073] sd 0:0:1:0: [sg0] tag#391 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1986.671969] sd 0:0:1:0: [sg0] tag#391 CDB[20]: a0 [ 1986.683643] sd 0:0:1:0: [sg0] tag#378 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1986.692590] sd 0:0:1:0: [sg0] tag#378 CDB: opcode=0xe5 (vendor) [ 1986.698726] sd 0:0:1:0: [sg0] tag#378 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1986.708138] sd 0:0:1:0: [sg0] tag#378 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1986.717023] sd 0:0:1:0: [sg0] tag#378 CDB[20]: a0 [ 1986.741176] sd 0:0:1:0: [sg0] tag#378 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK 17:16:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x7, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1986.749910] sd 0:0:1:0: [sg0] tag#378 CDB: opcode=0xe5 (vendor) [ 1986.756208] sd 0:0:1:0: [sg0] tag#378 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1986.765100] sd 0:0:1:0: [sg0] tag#378 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1986.773962] sd 0:0:1:0: [sg0] tag#378 CDB[20]: a0 17:16:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0xfc000000, 0x0, 0x0, 0x0}) 17:16:13 executing program 2 (fault-call:3 fault-nth:26): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) [ 1986.853434] sd 0:0:1:0: [sg0] tag#391 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1986.862440] sd 0:0:1:0: [sg0] tag#391 CDB: opcode=0xe5 (vendor) [ 1986.868562] sd 0:0:1:0: [sg0] tag#391 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1986.877479] sd 0:0:1:0: [sg0] tag#391 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1986.886538] sd 0:0:1:0: [sg0] tag#391 CDB[20]: a0 [ 1986.994865] sd 0:0:1:0: [sg0] tag#391 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1987.003694] sd 0:0:1:0: [sg0] tag#391 CDB: opcode=0xe5 (vendor) [ 1987.009823] sd 0:0:1:0: [sg0] tag#391 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1987.018825] sd 0:0:1:0: [sg0] tag#391 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1987.022844] FAULT_INJECTION: forcing a failure. [ 1987.022844] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1987.027709] sd 0:0:1:0: [sg0] tag#391 CDB[20]: a0 [ 1987.047690] CPU: 0 PID: 6490 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1987.054587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1987.063966] Call Trace: [ 1987.066584] dump_stack+0x172/0x1f0 [ 1987.070238] should_fail.cold+0xa/0x1b [ 1987.074150] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1987.079276] ? ___might_sleep+0x163/0x280 [ 1987.083460] ? __might_sleep+0x95/0x190 [ 1987.087455] __alloc_pages_nodemask+0x1ee/0x760 [ 1987.092146] ? fs_reclaim_acquire+0x20/0x20 [ 1987.096488] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1987.102087] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1987.107144] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1987.112724] alloc_pages_current+0x107/0x210 [ 1987.117174] get_zeroed_page+0x14/0x50 [ 1987.121084] mon_alloc_buff+0xc2/0x190 [ 1987.124988] ? mon_bin_ioctl+0x48e/0xc80 [ 1987.129081] mon_bin_ioctl+0x4ad/0xc80 [ 1987.132996] ? mon_bin_get_event+0x450/0x450 [ 1987.137431] ? __fget+0x340/0x540 [ 1987.140917] ? ___might_sleep+0x163/0x280 [ 1987.145107] ? __might_sleep+0x95/0x190 [ 1987.149107] ? mon_bin_get_event+0x450/0x450 [ 1987.153555] do_vfs_ioctl+0xd6e/0x1390 [ 1987.157472] ? selinux_file_ioctl+0x46f/0x5e0 [ 1987.161998] ? selinux_file_ioctl+0x125/0x5e0 [ 1987.166528] ? ioctl_preallocate+0x210/0x210 [ 1987.170957] ? selinux_file_mprotect+0x620/0x620 [ 1987.175758] ? iterate_fd+0x360/0x360 [ 1987.179589] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1987.185151] ? fput+0x128/0x1a0 [ 1987.188730] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1987.194299] ? security_file_ioctl+0x93/0xc0 [ 1987.198758] ksys_ioctl+0xab/0xd0 [ 1987.202243] __x64_sys_ioctl+0x73/0xb0 [ 1987.206683] do_syscall_64+0x103/0x610 [ 1987.210605] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1987.215824] RIP: 0033:0x458da9 [ 1987.219040] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1987.237971] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1987.245752] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1987.253229] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1987.260539] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1987.267833] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1987.275131] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x70000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000002c0)="0adcf6b645ee1f123c123f319bd0969c5c48793fe8b58dd980c7bef29b6ce608704fecae06f9a95b3606005599d0ebe5e196600c34d7701556e37855a8c202110ba0c4ae5988cd9b9cee72be674174c67779245738b8ac2b74e5c52b18f3ae26fe85bcce3b74e242ec2bb03604c4ce65a353353bbe070370073a3f3a7e803411ec954505000000a9edb3c84dc4852929a0dd7dfcbaa8f2b7404e64e78e800767a697474e22645d") r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x4, 0x40000) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f00000001c0)={0x1f, 0x5}) syz_execute_func(&(0x7f0000000080)="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") 17:16:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0a0700000000000000d070dbd41d856252b785e1164e37c79bae03d76ae259aad4d09c084f0120e6380c2ae69aa60698a81d1007007d74ce580e0595ce222de01782cbeffcc0b2c6904c8cf3ed2bd886bd37b2e5f9ddb8d011e974bb9fb37155adfd9866d5d4c93dd65f522f7c0b28173f06c4b8420ef63950afc57b05de28b44f5c30eb226a8431dda9288f00ce1df02149860f") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+', 0x9}, 0x28, 0x1) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000240)={0x0, 0x0, 0xce, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) 17:16:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0xfeffffff, 0x0, 0x0, 0x0}) 17:16:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:14 executing program 2 (fault-call:3 fault-nth:27): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) [ 1987.510756] sd 0:0:1:0: [sg0] tag#410 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1987.518900] FAULT_INJECTION: forcing a failure. [ 1987.518900] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1987.519577] sd 0:0:1:0: [sg0] tag#410 CDB: opcode=0xe5 (vendor) [ 1987.537444] CPU: 1 PID: 6507 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1987.537599] sd 0:0:1:0: [sg0] tag#410 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1987.544543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1987.544552] Call Trace: [ 1987.544586] dump_stack+0x172/0x1f0 [ 1987.544609] should_fail.cold+0xa/0x1b [ 1987.544639] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1987.553520] sd 0:0:1:0: [sg0] tag#410 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1987.562824] ? ___might_sleep+0x163/0x280 [ 1987.562843] ? __might_sleep+0x95/0x190 [ 1987.562861] __alloc_pages_nodemask+0x1ee/0x760 [ 1987.562878] ? fs_reclaim_acquire+0x20/0x20 [ 1987.562904] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1987.565509] sd 0:0:1:0: [sg0] tag#410 CDB[20]: a0 [ 1987.569185] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1987.619821] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1987.625528] alloc_pages_current+0x107/0x210 [ 1987.629984] get_zeroed_page+0x14/0x50 [ 1987.633930] mon_alloc_buff+0xc2/0x190 [ 1987.637851] ? mon_bin_ioctl+0x48e/0xc80 [ 1987.641958] mon_bin_ioctl+0x4ad/0xc80 [ 1987.645897] ? mon_bin_get_event+0x450/0x450 [ 1987.650356] ? __fget+0x340/0x540 [ 1987.653859] ? ___might_sleep+0x163/0x280 [ 1987.658052] ? __might_sleep+0x95/0x190 [ 1987.662068] ? mon_bin_get_event+0x450/0x450 [ 1987.666526] do_vfs_ioctl+0xd6e/0x1390 [ 1987.670452] ? selinux_file_ioctl+0x46f/0x5e0 [ 1987.674996] ? selinux_file_ioctl+0x125/0x5e0 [ 1987.679546] ? ioctl_preallocate+0x210/0x210 [ 1987.683996] ? selinux_file_mprotect+0x620/0x620 [ 1987.688804] ? iterate_fd+0x360/0x360 [ 1987.692656] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1987.698246] ? fput+0x128/0x1a0 [ 1987.701672] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1987.707355] ? security_file_ioctl+0x93/0xc0 [ 1987.713386] ksys_ioctl+0xab/0xd0 [ 1987.716885] __x64_sys_ioctl+0x73/0xb0 [ 1987.720816] do_syscall_64+0x103/0x610 [ 1987.724761] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1987.729991] RIP: 0033:0x458da9 [ 1987.733229] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1987.752428] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1987.760189] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1987.767513] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1987.774821] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1987.782136] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1987.789448] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000808912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x141000, 0x0) r3 = getegid() ioctl$TUNSETGROUP(r2, 0x400454ce, r3) 17:16:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x48, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0xffffff0f, 0x0, 0x0, 0x0}) 17:16:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x74000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x4c, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:15 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4, 0x600) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd262}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x4000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, &(0x7f0000000040)={0x3, 0x8}) ioctl$SG_IO(r0, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:15 executing program 2 (fault-call:3 fault-nth:28): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) [ 1988.236088] FAULT_INJECTION: forcing a failure. [ 1988.236088] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1988.249350] CPU: 1 PID: 6541 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1988.256242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1988.267637] Call Trace: [ 1988.270268] dump_stack+0x172/0x1f0 [ 1988.274047] should_fail.cold+0xa/0x1b [ 1988.277994] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1988.283143] ? ___might_sleep+0x163/0x280 [ 1988.287351] ? __might_sleep+0x95/0x190 [ 1988.291377] __alloc_pages_nodemask+0x1ee/0x760 [ 1988.296087] ? fs_reclaim_acquire+0x20/0x20 [ 1988.300463] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1988.306042] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1988.311119] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1988.316715] alloc_pages_current+0x107/0x210 [ 1988.321531] get_zeroed_page+0x14/0x50 [ 1988.325471] mon_alloc_buff+0xc2/0x190 [ 1988.329401] ? mon_bin_ioctl+0x48e/0xc80 [ 1988.333507] mon_bin_ioctl+0x4ad/0xc80 [ 1988.337443] ? mon_bin_get_event+0x450/0x450 [ 1988.341886] ? __fget+0x340/0x540 [ 1988.345379] ? ___might_sleep+0x163/0x280 [ 1988.349565] ? __might_sleep+0x95/0x190 [ 1988.353578] ? mon_bin_get_event+0x450/0x450 [ 1988.358058] do_vfs_ioctl+0xd6e/0x1390 [ 1988.361986] ? selinux_file_ioctl+0x46f/0x5e0 [ 1988.366518] ? selinux_file_ioctl+0x125/0x5e0 [ 1988.371058] ? ioctl_preallocate+0x210/0x210 [ 1988.375508] ? selinux_file_mprotect+0x620/0x620 [ 1988.380307] ? iterate_fd+0x360/0x360 [ 1988.384164] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1988.389737] ? fput+0x128/0x1a0 [ 1988.393059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1988.398642] ? security_file_ioctl+0x93/0xc0 [ 1988.403703] ksys_ioctl+0xab/0xd0 [ 1988.407211] __x64_sys_ioctl+0x73/0xb0 [ 1988.411136] do_syscall_64+0x103/0x610 [ 1988.415335] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1988.420555] RIP: 0033:0x458da9 [ 1988.423773] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1988.442713] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1988.450471] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1988.457777] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1988.465078] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1988.472395] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1988.479702] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000080)="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") socket$inet_udplite(0x2, 0x2, 0x88) 17:16:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x7a000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0xffffff7f, 0x0, 0x0, 0x0}) 17:16:15 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x80, 0x0) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000600)="782b3a0601648494c002bb474d26a591bc08343da7d62e348105a200427b103b8ac1ab387d779b7a562e92a66eabeb3230700b7f9de6e2018a9a0181115e0946a5b958d8d6bc4f8d76ab40ec709f0759f96f5effbcbf9069ccfc67fe55fec0f78d76f3e2d3df7e05bb92c973df6ee3f320ea945b22b0f1dcd13b9253aaf879287bdffbd5b2b9fd74e94af133563666796f665fcef7b9785b394ece1aa1f51da1e93ba6", 0xa3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000080)=""/115) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x27c, r4, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xcc9}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2f5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x54}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb09}]}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0xbc, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4e31}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2dc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffff90da}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}]}, @TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0x28, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}]}, @TIPC_NLA_LINK={0x64, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x8010}, 0xc4) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000280)={0x7ff, 0x50e, 0xffffffff7fffffff, 0x6, 0x5a3, "8c3f1e4ec96acaaa7e933a01bdf42aded58161", 0x5, 0x9}) 17:16:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x5d, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:15 executing program 2 (fault-call:3 fault-nth:29): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) [ 1988.607893] FAULT_INJECTION: forcing a failure. [ 1988.607893] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1988.616605] QAT: Invalid ioctl [ 1988.642873] QAT: Invalid ioctl [ 1988.664217] QAT: Invalid ioctl [ 1988.668643] CPU: 0 PID: 6558 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1988.675546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1988.676350] QAT: Invalid ioctl [ 1988.684939] Call Trace: [ 1988.684979] dump_stack+0x172/0x1f0 [ 1988.685003] should_fail.cold+0xa/0x1b [ 1988.685021] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1988.685036] ? ___might_sleep+0x163/0x280 [ 1988.685055] ? __might_sleep+0x95/0x190 [ 1988.685076] __alloc_pages_nodemask+0x1ee/0x760 [ 1988.685096] ? fs_reclaim_acquire+0x20/0x20 [ 1988.685117] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1988.685141] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1988.732689] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1988.738296] alloc_pages_current+0x107/0x210 [ 1988.742766] get_zeroed_page+0x14/0x50 [ 1988.746674] mon_alloc_buff+0xc2/0x190 [ 1988.750581] ? mon_bin_ioctl+0x48e/0xc80 [ 1988.754690] mon_bin_ioctl+0x4ad/0xc80 [ 1988.758609] ? mon_bin_get_event+0x450/0x450 [ 1988.763040] ? __fget+0x340/0x540 [ 1988.766515] ? ___might_sleep+0x163/0x280 [ 1988.770675] ? __might_sleep+0x95/0x190 [ 1988.774687] ? mon_bin_get_event+0x450/0x450 [ 1988.779120] do_vfs_ioctl+0xd6e/0x1390 [ 1988.783023] ? selinux_file_ioctl+0x46f/0x5e0 [ 1988.787530] ? selinux_file_ioctl+0x125/0x5e0 [ 1988.792047] ? ioctl_preallocate+0x210/0x210 [ 1988.796473] ? selinux_file_mprotect+0x620/0x620 [ 1988.801266] ? iterate_fd+0x360/0x360 [ 1988.805099] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1988.810667] ? fput+0x128/0x1a0 [ 1988.814023] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1988.819589] ? security_file_ioctl+0x93/0xc0 [ 1988.824034] ksys_ioctl+0xab/0xd0 [ 1988.827523] __x64_sys_ioctl+0x73/0xb0 [ 1988.831443] do_syscall_64+0x103/0x610 [ 1988.835375] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1988.840598] RIP: 0033:0x458da9 [ 1988.843811] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 17:16:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x60, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0xac000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1988.862743] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1988.870490] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1988.877814] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1988.891688] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1988.898994] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1988.906297] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0xfffffffe, 0x0, 0x0, 0x0}) 17:16:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x1, 0x10000) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='pids.events\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000001380)={0x0, 0x8}, &(0x7f00000013c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001400)={r3, @in6={{0xa, 0x4e20, 0x80000000, @mcast1, 0x8}}, 0xfd5, 0xff, 0x9, 0x0, 0x24}, 0x98) 17:16:16 executing program 2 (fault-call:3 fault-nth:30): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x68, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1989.167016] FAULT_INJECTION: forcing a failure. [ 1989.167016] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1989.228234] CPU: 1 PID: 6585 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1989.235255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1989.244637] Call Trace: [ 1989.247268] dump_stack+0x172/0x1f0 [ 1989.250951] should_fail.cold+0xa/0x1b [ 1989.254887] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1989.260016] ? ___might_sleep+0x163/0x280 [ 1989.264205] ? __might_sleep+0x95/0x190 [ 1989.268219] __alloc_pages_nodemask+0x1ee/0x760 [ 1989.272918] ? fs_reclaim_acquire+0x20/0x20 [ 1989.277285] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1989.282871] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1989.287931] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1989.293512] alloc_pages_current+0x107/0x210 [ 1989.297961] get_zeroed_page+0x14/0x50 [ 1989.301882] mon_alloc_buff+0xc2/0x190 [ 1989.305799] ? mon_bin_ioctl+0x48e/0xc80 [ 1989.310070] mon_bin_ioctl+0x4ad/0xc80 [ 1989.314034] ? mon_bin_get_event+0x450/0x450 [ 1989.318578] ? __fget+0x340/0x540 [ 1989.322065] ? ___might_sleep+0x163/0x280 [ 1989.326256] ? __might_sleep+0x95/0x190 [ 1989.330270] ? mon_bin_get_event+0x450/0x450 [ 1989.334732] do_vfs_ioctl+0xd6e/0x1390 [ 1989.338657] ? selinux_file_ioctl+0x46f/0x5e0 [ 1989.343178] ? selinux_file_ioctl+0x125/0x5e0 [ 1989.347711] ? ioctl_preallocate+0x210/0x210 [ 1989.352144] ? selinux_file_mprotect+0x620/0x620 [ 1989.356942] ? iterate_fd+0x360/0x360 [ 1989.360786] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1989.366367] ? fput+0x128/0x1a0 [ 1989.369692] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1989.375261] ? security_file_ioctl+0x93/0xc0 [ 1989.379703] ksys_ioctl+0xab/0xd0 [ 1989.383191] __x64_sys_ioctl+0x73/0xb0 [ 1989.387121] do_syscall_64+0x103/0x610 [ 1989.391049] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1989.396267] RIP: 0033:0x458da9 [ 1989.399496] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1989.418513] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1989.426262] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1989.433563] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1989.440866] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1989.448181] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1989.455491] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x1000000000000, 0x0, 0x0, 0x0}) 17:16:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0xfeffffff, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20a00, 0x80) getsockopt$nfc_llcp(r1, 0x118, 0x4, &(0x7f0000000080)=""/240, 0xf0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180), 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x6c, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000080)="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") fsetxattr$security_smack_entry(r0, &(0x7f0000000040)='security.SMACK64\x00', &(0x7f00000001c0)='wlan0eth0$self\\{$cgroup$\x00', 0x19, 0x1) 17:16:16 executing program 2 (fault-call:3 fault-nth:31): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) [ 1989.596835] FAULT_INJECTION: forcing a failure. [ 1989.596835] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1989.642610] CPU: 1 PID: 6601 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1989.649533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1989.658943] Call Trace: [ 1989.661573] dump_stack+0x172/0x1f0 [ 1989.665232] should_fail.cold+0xa/0x1b [ 1989.669572] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1989.674689] ? ___might_sleep+0x163/0x280 [ 1989.678858] ? __might_sleep+0x95/0x190 [ 1989.682854] __alloc_pages_nodemask+0x1ee/0x760 [ 1989.687573] ? check_preemption_disabled+0x48/0x290 [ 1989.692618] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1989.697678] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1989.703603] alloc_pages_current+0x107/0x210 [ 1989.708042] get_zeroed_page+0x14/0x50 [ 1989.713659] mon_alloc_buff+0xc2/0x190 [ 1989.717557] ? mon_bin_ioctl+0x48e/0xc80 [ 1989.721663] mon_bin_ioctl+0x4ad/0xc80 [ 1989.725575] ? mon_bin_get_event+0x450/0x450 [ 1989.730002] ? __fget+0x340/0x540 [ 1989.733474] ? ___might_sleep+0x163/0x280 [ 1989.737639] ? __might_sleep+0x95/0x190 [ 1989.741632] ? mon_bin_get_event+0x450/0x450 [ 1989.746066] do_vfs_ioctl+0xd6e/0x1390 [ 1989.749967] ? selinux_file_ioctl+0x46f/0x5e0 [ 1989.754472] ? selinux_file_ioctl+0x125/0x5e0 [ 1989.758981] ? ioctl_preallocate+0x210/0x210 [ 1989.763403] ? selinux_file_mprotect+0x620/0x620 [ 1989.768188] ? iterate_fd+0x360/0x360 [ 1989.772018] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1989.777572] ? fput+0x128/0x1a0 [ 1989.780875] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1989.786436] ? security_file_ioctl+0x93/0xc0 [ 1989.790881] ksys_ioctl+0xab/0xd0 [ 1989.794368] __x64_sys_ioctl+0x73/0xb0 [ 1989.798280] do_syscall_64+0x103/0x610 [ 1989.802206] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1989.807423] RIP: 0033:0x458da9 [ 1989.810640] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1989.831067] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:16:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000080)) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000240)={0x0, 0xc13b}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000380)={r3, 0x20, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e24, @empty}]}, &(0x7f00000003c0)=0x10) 17:16:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x70, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x20000000000000, 0x0, 0x0, 0x0}) [ 1989.838817] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1989.846133] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1989.855092] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1989.862387] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1989.869688] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0xffffff0f, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:17 executing program 2 (fault-call:3 fault-nth:32): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x100000000000000, 0x0, 0x0, 0x0}) 17:16:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x74, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in=@local}}, 0xe8) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="02120000020000000a000097d3d34473"], 0x10}}, 0x0) recvmmsg(r2, &(0x7f0000000f00), 0xd0, 0x10000, &(0x7f0000001000)={0x77359400}) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r3, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffe, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1990.184667] FAULT_INJECTION: forcing a failure. [ 1990.184667] name fail_page_alloc, interval 1, probability 0, space 0, times 0 17:16:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x200000000000000, 0x0, 0x0, 0x0}) [ 1990.257524] CPU: 0 PID: 6631 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1990.264540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1990.273922] Call Trace: [ 1990.276550] dump_stack+0x172/0x1f0 [ 1990.280213] should_fail.cold+0xa/0x1b [ 1990.284128] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1990.289251] ? ___might_sleep+0x163/0x280 [ 1990.293430] ? __might_sleep+0x95/0x190 [ 1990.297429] __alloc_pages_nodemask+0x1ee/0x760 [ 1990.302211] ? check_preemption_disabled+0x48/0x290 [ 1990.302231] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1990.302259] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1990.302279] alloc_pages_current+0x107/0x210 [ 1990.302300] get_zeroed_page+0x14/0x50 [ 1990.302327] mon_alloc_buff+0xc2/0x190 [ 1990.302341] ? mon_bin_ioctl+0x48e/0xc80 [ 1990.302360] mon_bin_ioctl+0x4ad/0xc80 [ 1990.312429] ? mon_bin_get_event+0x450/0x450 [ 1990.312448] ? __fget+0x340/0x540 [ 1990.312470] ? ___might_sleep+0x163/0x280 [ 1990.350194] ? __might_sleep+0x95/0x190 [ 1990.354242] ? mon_bin_get_event+0x450/0x450 [ 1990.358684] do_vfs_ioctl+0xd6e/0x1390 [ 1990.362602] ? selinux_file_ioctl+0x46f/0x5e0 [ 1990.367122] ? selinux_file_ioctl+0x125/0x5e0 [ 1990.371647] ? ioctl_preallocate+0x210/0x210 [ 1990.376075] ? selinux_file_mprotect+0x620/0x620 [ 1990.380860] ? iterate_fd+0x360/0x360 [ 1990.384686] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1990.390246] ? fput+0x128/0x1a0 [ 1990.393556] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1990.399120] ? security_file_ioctl+0x93/0xc0 [ 1990.403559] ksys_ioctl+0xab/0xd0 [ 1990.407036] __x64_sys_ioctl+0x73/0xb0 [ 1990.410941] do_syscall_64+0x103/0x610 [ 1990.410963] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1990.410975] RIP: 0033:0x458da9 [ 1990.410991] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1990.410998] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1990.411011] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1990.411018] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1990.411026] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1990.411032] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1990.411040] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x1000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x300000000000000, 0x0, 0x0, 0x0}) 17:16:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x7a, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:17 executing program 2 (fault-call:3 fault-nth:33): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:17 executing program 5 (fault-call:3 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000080)=""/203) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1990.784038] FAULT_INJECTION: forcing a failure. [ 1990.784038] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1990.818160] CPU: 0 PID: 6666 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1990.825068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1990.834451] Call Trace: [ 1990.837086] dump_stack+0x172/0x1f0 [ 1990.840775] should_fail.cold+0xa/0x1b [ 1990.844734] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1990.849873] ? ___might_sleep+0x163/0x280 [ 1990.854061] ? __might_sleep+0x95/0x190 [ 1990.858056] __alloc_pages_nodemask+0x1ee/0x760 [ 1990.862748] ? fs_reclaim_acquire+0x20/0x20 [ 1990.867090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1990.872649] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1990.877705] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1990.883268] alloc_pages_current+0x107/0x210 [ 1990.887799] get_zeroed_page+0x14/0x50 [ 1990.891717] mon_alloc_buff+0xc2/0x190 [ 1990.895623] ? mon_bin_ioctl+0x48e/0xc80 [ 1990.899736] mon_bin_ioctl+0x4ad/0xc80 [ 1990.903658] ? mon_bin_get_event+0x450/0x450 [ 1990.908092] ? __fget+0x340/0x540 [ 1990.911563] ? ___might_sleep+0x163/0x280 [ 1990.916000] ? __might_sleep+0x95/0x190 [ 1990.919993] ? mon_bin_get_event+0x450/0x450 [ 1990.924430] do_vfs_ioctl+0xd6e/0x1390 [ 1990.928345] ? selinux_file_ioctl+0x46f/0x5e0 [ 1990.932857] ? selinux_file_ioctl+0x125/0x5e0 [ 1990.937372] ? ioctl_preallocate+0x210/0x210 [ 1990.941797] ? selinux_file_mprotect+0x620/0x620 [ 1990.946574] ? iterate_fd+0x360/0x360 [ 1990.950395] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1990.956065] ? fput+0x128/0x1a0 [ 1990.959384] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1990.965064] ? security_file_ioctl+0x93/0xc0 [ 1990.969497] ksys_ioctl+0xab/0xd0 [ 1990.972977] __x64_sys_ioctl+0x73/0xb0 [ 1990.977236] do_syscall_64+0x103/0x610 [ 1990.981151] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1990.986354] RIP: 0033:0x458da9 [ 1990.989563] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1991.008502] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1991.016245] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1991.023535] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 17:16:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x20000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x400000000000000, 0x0, 0x0, 0x0}) 17:16:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x600040, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x300, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1991.030826] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1991.038125] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1991.045422] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:18 executing program 2 (fault-call:3 fault-nth:34): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x100000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x500, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x500000000000000, 0x0, 0x0, 0x0}) [ 1991.269335] FAULT_INJECTION: forcing a failure. [ 1991.269335] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1991.305257] scsi_io_completion_action: 31 callbacks suppressed 17:16:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x100, 0x0) read$alg(r1, &(0x7f0000000380)=""/186, 0xba) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x501408, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200010}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="000727bd7000fcdbdf250d00000038005f7144c7931c779ccb6233020008000900ff010000080008000900000014000100ffffffff000000000000000000000000080007000180050000000600ac05000038000100080006006c630000080004004e200000080001000a160000080009004e00000008000100000000000c"], 0x84}, 0x1, 0x0, 0x0, 0x40020}, 0x40811) r5 = pkey_alloc(0x0, 0x2) r6 = getpid() ptrace$poke(0x4, r6, &(0x7f0000000040), 0x9) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, r5) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f00000001c0)) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = semget$private(0x0, 0x0, 0xa) semctl$GETALL(r7, 0x0, 0xd, &(0x7f0000000440)=""/79) [ 1991.305292] sd 0:0:1:0: [sg0] tag#410 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1991.320165] sd 0:0:1:0: [sg0] tag#410 CDB: opcode=0xe5 (vendor) [ 1991.326426] sd 0:0:1:0: [sg0] tag#410 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1991.335294] sd 0:0:1:0: [sg0] tag#410 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1991.344230] sd 0:0:1:0: [sg0] tag#410 CDB[20]: a0 [ 1991.375397] sd 0:0:1:0: [sg0] tag#451 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1991.384402] sd 0:0:1:0: [sg0] tag#451 CDB: opcode=0xe5 (vendor) [ 1991.384763] CPU: 0 PID: 6692 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1991.390529] sd 0:0:1:0: [sg0] tag#451 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1991.397370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1991.397378] Call Trace: [ 1991.397409] dump_stack+0x172/0x1f0 [ 1991.397429] should_fail.cold+0xa/0x1b [ 1991.397445] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1991.397459] ? ___might_sleep+0x163/0x280 [ 1991.397474] ? __might_sleep+0x95/0x190 [ 1991.397492] __alloc_pages_nodemask+0x1ee/0x760 [ 1991.397509] ? check_preemption_disabled+0x48/0x290 [ 1991.397528] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1991.406430] sd 0:0:1:0: [sg0] tag#451 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1991.415734] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1991.415755] alloc_pages_current+0x107/0x210 [ 1991.415777] get_zeroed_page+0x14/0x50 [ 1991.415797] mon_alloc_buff+0xc2/0x190 [ 1991.418407] sd 0:0:1:0: [sg0] tag#451 CDB[20]: a0 [ 1991.422046] ? mon_bin_ioctl+0x48e/0xc80 [ 1991.422064] mon_bin_ioctl+0x4ad/0xc80 [ 1991.422079] ? mon_bin_get_event+0x450/0x450 [ 1991.422095] ? __fget+0x340/0x540 [ 1991.422111] ? ___might_sleep+0x163/0x280 [ 1991.422125] ? __might_sleep+0x95/0x190 [ 1991.422139] ? mon_bin_get_event+0x450/0x450 [ 1991.422163] do_vfs_ioctl+0xd6e/0x1390 [ 1991.517674] ? selinux_file_ioctl+0x46f/0x5e0 17:16:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = request_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='*nodeveth1mime_typecgroupselinux\x00', 0xfffffffffffffffb) keyctl$clear(0x7, r2) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x109) write$eventfd(r3, &(0x7f0000000080)=0x100, 0x8) [ 1991.522204] ? selinux_file_ioctl+0x125/0x5e0 [ 1991.526824] ? ioctl_preallocate+0x210/0x210 [ 1991.531524] ? selinux_file_mprotect+0x620/0x620 [ 1991.536332] ? iterate_fd+0x360/0x360 [ 1991.540168] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1991.545745] ? fput+0x128/0x1a0 [ 1991.549068] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1991.554644] ? security_file_ioctl+0x93/0xc0 [ 1991.559103] ksys_ioctl+0xab/0xd0 [ 1991.562590] __x64_sys_ioctl+0x73/0xb0 [ 1991.566507] do_syscall_64+0x103/0x610 [ 1991.570420] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1991.575630] RIP: 0033:0x458da9 [ 1991.578841] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1991.597769] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1991.603647] sd 0:0:1:0: [sg0] tag#452 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1991.605507] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1991.605517] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1991.605525] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1991.605534] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1991.605556] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 [ 1991.614330] sd 0:0:1:0: [sg0] tag#452 CDB: opcode=0xe5 (vendor) [ 1991.657217] sd 0:0:1:0: [sg0] tag#452 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1991.666094] sd 0:0:1:0: [sg0] tag#452 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 17:16:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xe32, &(0x7f0000000140)="39c52eb3b1e5a749a85ba4b5b461ee0adcd3c82900c9311bd070a8f74b0500cc9fc7435537c6d3e89ea71172351f99d05de2fd92b5aa46011299edf24f12e30a2669d62a23ab3db61ec3f65afb07340000000018002f76f08cec08") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x600, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) socketpair(0x9, 0x800, 0x7fffffff, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000080)=0x3f, 0x4) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x210000, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000100)={0x0, 0x0, [], {0x0, @bt={0x4, 0x9, 0x1, 0xe4acf316ffeeffa3, 0xffffffff, 0x80, 0x6, 0x2, 0xf8a, 0x3ff, 0x5, 0x1, 0x2a, 0x100000000, 0x14, 0x28}}}) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) [ 1991.674958] sd 0:0:1:0: [sg0] tag#452 CDB[20]: a0 17:16:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x200000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1991.793735] sd 0:0:1:0: [sg0] tag#430 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1991.802677] sd 0:0:1:0: [sg0] tag#430 CDB: opcode=0xe5 (vendor) [ 1991.809272] sd 0:0:1:0: [sg0] tag#430 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1991.818661] sd 0:0:1:0: [sg0] tag#430 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1991.828606] sd 0:0:1:0: [sg0] tag#430 CDB[20]: a0 17:16:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adcd6fa8afeaa5fc4d84af93b573f319bd0702ec172a5da9e7e18bc51bc4583fd5d3a8392c0b4e75c5f643dccccff3634e53218548daa114c63277a5a798f6dbc764c1ba3") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000080)=0x1e) 17:16:18 executing program 2 (fault-call:3 fault-nth:35): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x200000) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000100)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x200040, 0x0) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f00000000c0)) [ 1991.842131] sd 0:0:1:0: [sg0] tag#430 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1991.851684] sd 0:0:1:0: [sg0] tag#430 CDB: opcode=0xe5 (vendor) [ 1991.857853] sd 0:0:1:0: [sg0] tag#430 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1991.866787] sd 0:0:1:0: [sg0] tag#430 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1991.875675] sd 0:0:1:0: [sg0] tag#430 CDB[20]: a0 17:16:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x600000000000000, 0x0, 0x0, 0x0}) 17:16:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x300000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1991.968331] FAULT_INJECTION: forcing a failure. [ 1991.968331] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1992.025876] CPU: 1 PID: 6735 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1992.032803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1992.042190] Call Trace: [ 1992.044835] dump_stack+0x172/0x1f0 [ 1992.048505] should_fail.cold+0xa/0x1b [ 1992.052442] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1992.057582] ? ___might_sleep+0x163/0x280 [ 1992.061757] ? __might_sleep+0x95/0x190 [ 1992.065754] __alloc_pages_nodemask+0x1ee/0x760 [ 1992.070464] ? check_preemption_disabled+0x48/0x290 [ 1992.074008] sd 0:0:1:0: [sg0] tag#457 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1992.075511] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1992.075544] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1992.075565] alloc_pages_current+0x107/0x210 [ 1992.075587] get_zeroed_page+0x14/0x50 [ 1992.084267] sd 0:0:1:0: [sg0] tag#457 CDB: opcode=0xe5 (vendor) [ 1992.089230] mon_alloc_buff+0xc2/0x190 [ 1992.094853] sd 0:0:1:0: [sg0] tag#457 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1992.099204] ? mon_bin_ioctl+0x48e/0xc80 [ 1992.103176] sd 0:0:1:0: [sg0] tag#457 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1992.109279] mon_bin_ioctl+0x4ad/0xc80 [ 1992.113263] sd 0:0:1:0: [sg0] tag#457 CDB[20]: a0 [ 1992.121956] ? mon_bin_get_event+0x450/0x450 [ 1992.121974] ? __fget+0x340/0x540 [ 1992.121991] ? ___might_sleep+0x163/0x280 [ 1992.122006] ? __might_sleep+0x95/0x190 [ 1992.122020] ? mon_bin_get_event+0x450/0x450 [ 1992.122043] do_vfs_ioctl+0xd6e/0x1390 [ 1992.167908] ? selinux_file_ioctl+0x46f/0x5e0 [ 1992.172435] ? selinux_file_ioctl+0x125/0x5e0 [ 1992.176970] ? ioctl_preallocate+0x210/0x210 [ 1992.181408] ? selinux_file_mprotect+0x620/0x620 [ 1992.181434] ? iterate_fd+0x360/0x360 [ 1992.181454] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1992.181467] ? fput+0x128/0x1a0 [ 1992.181488] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1992.204456] ? security_file_ioctl+0x93/0xc0 [ 1992.208906] ksys_ioctl+0xab/0xd0 [ 1992.212399] __x64_sys_ioctl+0x73/0xb0 [ 1992.216331] do_syscall_64+0x103/0x610 [ 1992.220252] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1992.225470] RIP: 0033:0x458da9 [ 1992.228691] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1992.247626] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1992.255401] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1992.262709] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1992.270018] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 17:16:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x400000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x1}, &(0x7f00000000c0)=0x2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={r3, 0x8001}, &(0x7f0000000140)=0x8) 17:16:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x100000001, 0x10000) r2 = getpid() r3 = getuid() ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000080)={0x8, 0xffffffffffffffff, r2, 0x0, r3, 0x0, 0x5, 0x100000001}) r4 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f00000000c0)="3a41327d0ff8adaa8448ed9d441519f5f9e1a357b10a5c78ca53fad41b4cba41084f878f12c65573281f3ef8e341b5f71fe471da58b110fdd46d90dfae4c4788290ab33bb756df9baac64597b09edb1b51be513ccdf3cc14763927046da8c02e36bf07261832bf4f8277b2f77552b82d91cbfd3e2965cad8627d35130581aa0218e2d3fc620c0b622e9e469164253902d7abf2ccb5dec85fab6a6296e83f1558f11f7644546b68f3fd9ec0efc1ba850ded25f42a3f0a5dd3ecfd79a0b8034fa5c1", &(0x7f0000000380)="306e6f2e93c7e46a4ac820268a2a5c628a71e7ad58e9a87c0de67cf8a647e01bc33a91e1c1d38e2b3e18cbb9b0698eab1edbd42c623a3a2d92c66f3343fec77bf31f9cfe59f61cdc2c7f03bb827583f3047a796284c75575254a18f57dbf04bf550d34c5075db8ad3f02605bf7a2423389b3ffe13717e573437402b4a4c5b6dc8a67eb5fa0dfc09828a56c34953a6a91a37eed7793e81cb3b7092d0401efd5050517f5a249075f0dbfe68793d8af4a4d2c280be33fffc62c2eda2cbe622a21de4ef55a8ae40a457c4ebdbc11bfdb7f187c8c710a14a9d748a01d43add93d6a", 0x1}, 0x20) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f00000002c0)=0x3) ioctl$SG_IO(r4, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1992.271463] sd 0:0:1:0: [sg0] tag#465 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1992.277329] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1992.277340] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 [ 1992.294372] sd 0:0:1:0: [sg0] tag#465 CDB: opcode=0xe5 (vendor) [ 1992.307748] sd 0:0:1:0: [sg0] tag#465 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1992.316912] sd 0:0:1:0: [sg0] tag#465 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 17:16:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x700, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1992.325991] sd 0:0:1:0: [sg0] tag#465 CDB[20]: a0 [ 1992.340507] sd 0:0:1:0: [sg0] tag#396 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1992.349465] sd 0:0:1:0: [sg0] tag#396 CDB: opcode=0xe5 (vendor) [ 1992.355690] sd 0:0:1:0: [sg0] tag#396 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1992.364555] sd 0:0:1:0: [sg0] tag#396 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1992.373532] sd 0:0:1:0: [sg0] tag#396 CDB[20]: a0 17:16:19 executing program 2 (fault-call:3 fault-nth:36): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000080)={0x9, 0x10000}) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1992.414603] sd 0:0:1:0: [sg0] tag#396 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1992.423538] sd 0:0:1:0: [sg0] tag#396 CDB: opcode=0xe5 (vendor) [ 1992.429674] sd 0:0:1:0: [sg0] tag#396 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1992.438572] sd 0:0:1:0: [sg0] tag#396 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1992.447460] sd 0:0:1:0: [sg0] tag#396 CDB[20]: a0 17:16:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)="ae2e366295c35866b646efdfaaf5760eeab3a51dc0303d1f864c746d3c8e8c2469be2b624547c392f60a07a65f8b587ab1d878cfb5d88001c457217e28d11e17f78aef312eb635be8206a0221174a1229f6634cacd5a5818eab8e879b4bdf45e792da61832c2c5c0a6ba46ffef4744e50343faabe68919f57963db3a361a5ae7033fa1a84ca3228b2243d2d7d8f0867410e80fc4ebed8a6cba9bdf5b68e4f5ab00131b45dc61c967159b7ccd7f05545f864c967ed59d7b3c329732a2aa6e2d6ec9dda2a953dc28bbc3aa5e7aa661c8b5fef48d23fe917a2e74a510886c2d8c22996eb2f8a6e0de", 0xe7}, {&(0x7f0000000240)="7e58ba5da6b7e536ed30db7df493980600d70aeb3dddbfce557a743701069eb05b3026ffff68f9f57a5ccc6bed7c11f4fc0da2a14f712eda3f91268ae1561cba62772ae33d4e99cd1b707cc5815d810d35f9c8be27c6ed5406263405114fe90967c9150bcfb1cca2d1f044c8518135fb4fbd79d0b6dc7f925f9af28ce62432b9a317ef2d66a779abd7c18bdce8af342982714b83c5e3b129f6ab7385f7506e8fa809dd575b9fe836ec56dae82c00c329af5fb3f229a646e373ffba6264ced18cd9b496576f7dbcd376ab5181fc4d6cb7b21fe6e851a73849d8", 0xd9}, {&(0x7f0000000340)="2ad0a1194af39cb334c3ab7e7986b0f4125062926790ab696458f2f8445995d5451aa18dcd2c988c9fcddcdc460617891b21a6b05d1e63b27152c16585a8b1ea1a215ad97894541c35578b78d8def2dfd3b235f99f", 0x55}], 0x3) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x10, 0x4) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) fchdir(r0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x1f00, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1992.536434] FAULT_INJECTION: forcing a failure. [ 1992.536434] name fail_page_alloc, interval 1, probability 0, space 0, times 0 17:16:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x700000000000000, 0x0, 0x0, 0x0}) [ 1992.631389] sd 0:0:1:0: [sg0] tag#494 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1992.638123] CPU: 1 PID: 6762 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1992.640153] sd 0:0:1:0: [sg0] tag#494 CDB: opcode=0xe5 (vendor) [ 1992.646932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1992.646941] Call Trace: [ 1992.646978] dump_stack+0x172/0x1f0 [ 1992.647005] should_fail.cold+0xa/0x1b [ 1992.647026] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1992.647041] ? ___might_sleep+0x163/0x280 [ 1992.647059] ? __might_sleep+0x95/0x190 [ 1992.647080] __alloc_pages_nodemask+0x1ee/0x760 [ 1992.647100] ? check_preemption_disabled+0x48/0x290 [ 1992.647119] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1992.647150] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1992.647170] alloc_pages_current+0x107/0x210 [ 1992.647193] get_zeroed_page+0x14/0x50 [ 1992.647223] mon_alloc_buff+0xc2/0x190 [ 1992.647236] ? mon_bin_ioctl+0x48e/0xc80 [ 1992.647257] mon_bin_ioctl+0x4ad/0xc80 [ 1992.647277] ? mon_bin_get_event+0x450/0x450 [ 1992.647303] ? __fget+0x340/0x540 [ 1992.653571] sd 0:0:1:0: [sg0] tag#494 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1992.662915] ? ___might_sleep+0x163/0x280 [ 1992.662932] ? __might_sleep+0x95/0x190 [ 1992.662949] ? mon_bin_get_event+0x450/0x450 [ 1992.662970] do_vfs_ioctl+0xd6e/0x1390 [ 1992.662993] ? selinux_file_ioctl+0x46f/0x5e0 [ 1992.665602] sd 0:0:1:0: [sg0] tag#494 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1992.669239] ? selinux_file_ioctl+0x125/0x5e0 [ 1992.673227] sd 0:0:1:0: [sg0] tag#494 CDB[20]: a0 [ 1992.678260] ? ioctl_preallocate+0x210/0x210 [ 1992.678277] ? selinux_file_mprotect+0x620/0x620 [ 1992.678300] ? iterate_fd+0x360/0x360 [ 1992.678334] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1992.801057] ? fput+0x128/0x1a0 [ 1992.804384] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1992.809963] ? security_file_ioctl+0x93/0xc0 [ 1992.814430] ksys_ioctl+0xab/0xd0 [ 1992.817934] __x64_sys_ioctl+0x73/0xb0 [ 1992.822355] do_syscall_64+0x103/0x610 [ 1992.826283] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1992.831510] RIP: 0033:0x458da9 [ 1992.834725] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1992.853650] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1992.861397] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1992.868697] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 17:16:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x800000000000000, 0x0, 0x0, 0x0}) 17:16:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x2000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x1000000000000000, 0x0, 0x0, 0x0}) 17:16:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x500000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x4800, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x1f00000000000000, 0x0, 0x0, 0x0}) 17:16:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r2 = semget(0x0, 0x3, 0x88) semctl$IPC_RMID(r2, 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$SETVAL(r2, 0x5, 0x10, &(0x7f0000000080)) [ 1992.876047] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1992.884247] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1992.891539] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:20 executing program 2 (fault-call:3 fault-nth:37): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x22800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000080)={0x240000000, 0x6, 0x7cb, 0x100000000, 0x7, 0x6}) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x4c00, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x600000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:20 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x509000, 0x0) bind$isdn_base(r0, &(0x7f0000000100)={0x22, 0xffff, 0x8, 0xffffffffffffff82, 0x7b}, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x40000, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000080)=0x8) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x2000000000000000, 0x0, 0x0, 0x0}) [ 1993.235844] FAULT_INJECTION: forcing a failure. [ 1993.235844] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1993.267864] CPU: 0 PID: 6828 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1993.274793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1993.274801] Call Trace: [ 1993.274831] dump_stack+0x172/0x1f0 [ 1993.274857] should_fail.cold+0xa/0x1b [ 1993.274879] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1993.274896] ? ___might_sleep+0x163/0x280 [ 1993.274915] ? __might_sleep+0x95/0x190 [ 1993.274937] __alloc_pages_nodemask+0x1ee/0x760 [ 1993.274957] ? check_preemption_disabled+0x48/0x290 [ 1993.274977] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1993.275007] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1993.275029] alloc_pages_current+0x107/0x210 [ 1993.275062] get_zeroed_page+0x14/0x50 [ 1993.322481] mon_alloc_buff+0xc2/0x190 [ 1993.322495] ? mon_bin_ioctl+0x48e/0xc80 [ 1993.322510] mon_bin_ioctl+0x4ad/0xc80 [ 1993.322530] ? mon_bin_get_event+0x450/0x450 [ 1993.322546] ? __fget+0x340/0x540 [ 1993.322564] ? ___might_sleep+0x163/0x280 [ 1993.322580] ? __might_sleep+0x95/0x190 [ 1993.322598] ? mon_bin_get_event+0x450/0x450 [ 1993.348351] do_vfs_ioctl+0xd6e/0x1390 [ 1993.364363] ? selinux_file_ioctl+0x46f/0x5e0 [ 1993.364378] ? selinux_file_ioctl+0x125/0x5e0 [ 1993.364399] ? ioctl_preallocate+0x210/0x210 [ 1993.364416] ? selinux_file_mprotect+0x620/0x620 [ 1993.390909] ? iterate_fd+0x360/0x360 [ 1993.394749] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1993.400321] ? fput+0x128/0x1a0 [ 1993.403637] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1993.409210] ? security_file_ioctl+0x93/0xc0 [ 1993.413660] ksys_ioctl+0xab/0xd0 [ 1993.417160] __x64_sys_ioctl+0x73/0xb0 [ 1993.421082] do_syscall_64+0x103/0x610 [ 1993.425013] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1993.430216] RIP: 0033:0x458da9 [ 1993.433427] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1993.433436] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1993.433450] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1993.433458] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1993.433465] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 17:16:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x700000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0xffffffffffffffff, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="9c2f07c824dbf9b2efdea08f24b020ca2fab6c71a727e0a57b51cf65a40e1c084f6edeba3cd0e2fda3fe77bb29f8ac83f387bca88f0ed0dafc6f532ad8681b0d0fa7ae06634cc1d45515c80d7aae405a127a4e86b9058d728ab5e9ab62eba96e1741a307b2b6a1662acd55eb32f4be5b8d4aa4347c54800df79a37024d26c62ad28034933469408032dd754001bc2f47204200b681e935118e37a0e1f8212368e0f130bd237edd24b812f89f57e45b462c264c", 0xb3}, {&(0x7f0000000100)="2202818bff352d222cba1b9b975c937446bcf6025d20856ab9d82276a252f6d924fc82321fcbe8944531853157496b6e647dfc56597263279a77b19284593f9751ae8784bcbfac37387bcc4724431050a10ed497ec725a5ed1d2a01940fcc4327e9a02600c7aceb5d6abac86c727d31e51c4e3caeb9c81158ae28aad", 0x7c}, {&(0x7f0000000380)="3698a0246aebcbc2502cb2954370c60f5923dbaaae3bf6fcc8ade45f90dda95520c5918a31945a6c14a0cc4036ad082ad0f4bbd8312e948223778556c776cd8a2401252b0e7f7ee1de674453ddb933dc8531d86996836eefa400af56d2435e43941d32a9d82359b3017692abee138c90357f8d810cf37357a472a4642d5ee76f4264c6755f4a41782a57b070fdc766038018d53745377eafb3d220cc6bfe2ac32420af214ff45564de008e1e3d172f1f2372b09c4f0ffb12efabcf4da7d808a78ad116ee4f17bff80bd88492d2ec5ed1d4eb6ee4df1034978b29184f7f7d1de36b7eee6d018f322da10718004eff92", 0xef}], 0x3, 0x0) 17:16:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") fcntl$getownex(r0, 0x10, &(0x7f0000000200)) ioctl$SG_IO(0xffffffffffffffff, 0x2284, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x5d00, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x4800000000000000, 0x0, 0x0, 0x0}) 17:16:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r0}, 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000240)={0x6, 0x6, 0x7, 'queue1\x00', 0x7}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000140)={0x3, [0xe8, 0xffffffffffffffff, 0x8995]}, &(0x7f0000000180)=0xa) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1993.433473] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1993.433481] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:20 executing program 2 (fault-call:3 fault-nth:38): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x6000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:20 executing program 5: syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0x40000000a, 0xffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x800000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x4c00000000000000, 0x0, 0x0, 0x0}) 17:16:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7fff, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:20 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x7ff, 0x2000) recvfrom$inet(r0, &(0x7f0000000080)=""/218, 0xda, 0x10001, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f00000001c0)={0x2, 0x9a}) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1993.755517] audit: type=1800 audit(1556903780.818:149): pid=6869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="v4l-subdev4" dev="sda1" ino=16541 res=0 17:16:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x6000000000000000, 0x0, 0x0, 0x0}) 17:16:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x1f00000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x6800, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r2 = dup2(r0, r0) getpeername$netlink(r2, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1993.903733] FAULT_INJECTION: forcing a failure. [ 1993.903733] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1993.948212] CPU: 0 PID: 6875 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1993.955169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1993.964561] Call Trace: [ 1993.967192] dump_stack+0x172/0x1f0 [ 1993.970863] should_fail.cold+0xa/0x1b [ 1993.974796] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1993.979934] ? ___might_sleep+0x163/0x280 [ 1993.984119] ? __might_sleep+0x95/0x190 [ 1993.988133] __alloc_pages_nodemask+0x1ee/0x760 [ 1993.992837] ? fs_reclaim_acquire+0x20/0x20 17:16:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_GET_THP_DISABLE(0x2a) [ 1993.997190] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1994.002753] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1994.007815] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1994.013394] alloc_pages_current+0x107/0x210 [ 1994.013416] get_zeroed_page+0x14/0x50 [ 1994.013431] mon_alloc_buff+0xc2/0x190 [ 1994.013442] ? mon_bin_ioctl+0x48e/0xc80 [ 1994.013458] mon_bin_ioctl+0x4ad/0xc80 [ 1994.013478] ? mon_bin_get_event+0x450/0x450 [ 1994.029757] ? __fget+0x340/0x540 [ 1994.041522] ? ___might_sleep+0x163/0x280 [ 1994.045717] ? __might_sleep+0x95/0x190 [ 1994.049724] ? mon_bin_get_event+0x450/0x450 [ 1994.049748] do_vfs_ioctl+0xd6e/0x1390 [ 1994.049768] ? selinux_file_ioctl+0x46f/0x5e0 [ 1994.062631] ? selinux_file_ioctl+0x125/0x5e0 [ 1994.067165] ? ioctl_preallocate+0x210/0x210 [ 1994.067183] ? selinux_file_mprotect+0x620/0x620 [ 1994.067206] ? iterate_fd+0x360/0x360 [ 1994.080337] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1994.085946] ? fput+0x128/0x1a0 [ 1994.089261] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1994.094833] ? security_file_ioctl+0x93/0xc0 [ 1994.099278] ksys_ioctl+0xab/0xd0 [ 1994.099299] __x64_sys_ioctl+0x73/0xb0 [ 1994.099332] do_syscall_64+0x103/0x610 [ 1994.110618] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1994.115835] RIP: 0033:0x458da9 [ 1994.119058] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1994.137991] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:16:21 executing program 2 (fault-call:3 fault-nth:39): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x6800000000000000, 0x0, 0x0, 0x0}) 17:16:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x3f00000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]) setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000680)={0x3, &(0x7f0000000640)=[{0x1ff, 0x5, 0x401}, {0x3, 0xf2eb, 0x3ff, 0x81}, {0xffffffffffffffff, 0x5, 0x1ff, 0xbb}]}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000040)=0x10001, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x80000000, 0x28, 0x6, 0x6}, {0x2, 0x101, 0x6, 0xfff}]}, 0x10) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x6c00, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1994.138011] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1994.138017] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1994.138025] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1994.138032] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1994.138039] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x4800000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x6c00000000000000, 0x0, 0x0, 0x0}) 17:16:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x7000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1994.313434] FAULT_INJECTION: forcing a failure. [ 1994.313434] name fail_page_alloc, interval 1, probability 0, space 0, times 0 17:16:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000180)={0x0, 0xfffffffffffffffd, 0x9e, 0x1, @buffer={0x0, 0x8, &(0x7f0000000040)=""/8}, &(0x7f0000000080)="11a98f93ca4b7c353786e4fb143144ba838e0f706e4784a475dda4a101fe339403a4528c978ff611942520d11ef39818553500e73c30071c35578cc07d64fc8685ae8a28e6ee6ea3545105abde8c79daf4d76df9e4143d57c34545b3e6db1192292875f0ca21149ce67a298fa2a0f66bd88fa9c0402a7f3d5e51e25ff865df4c346f71459192a20af7f3841c53362c47856207c559d46edfc881e8b55b6c", &(0x7f0000000380)=""/226, 0x80000000, 0x25, 0xffffffffffffffff, &(0x7f0000000140)}) [ 1994.410652] CPU: 1 PID: 6914 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1994.417579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1994.426965] Call Trace: [ 1994.429591] dump_stack+0x172/0x1f0 [ 1994.433264] should_fail.cold+0xa/0x1b [ 1994.437207] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1994.442352] ? ___might_sleep+0x163/0x280 [ 1994.446537] ? __might_sleep+0x95/0x190 [ 1994.450540] __alloc_pages_nodemask+0x1ee/0x760 [ 1994.455248] ? fs_reclaim_acquire+0x20/0x20 [ 1994.459614] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1994.465190] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1994.470269] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1994.475976] alloc_pages_current+0x107/0x210 [ 1994.480426] get_zeroed_page+0x14/0x50 [ 1994.484352] mon_alloc_buff+0xc2/0x190 [ 1994.488272] ? mon_bin_ioctl+0x48e/0xc80 [ 1994.492380] mon_bin_ioctl+0x4ad/0xc80 [ 1994.496299] ? mon_bin_get_event+0x450/0x450 [ 1994.500750] ? __fget+0x340/0x540 [ 1994.504248] ? ___might_sleep+0x163/0x280 [ 1994.508421] ? __might_sleep+0x95/0x190 [ 1994.512424] ? mon_bin_get_event+0x450/0x450 [ 1994.516862] do_vfs_ioctl+0xd6e/0x1390 [ 1994.520771] ? selinux_file_ioctl+0x46f/0x5e0 [ 1994.520785] ? selinux_file_ioctl+0x125/0x5e0 [ 1994.520803] ? ioctl_preallocate+0x210/0x210 [ 1994.520816] ? selinux_file_mprotect+0x620/0x620 [ 1994.520840] ? iterate_fd+0x360/0x360 [ 1994.529882] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1994.548428] ? fput+0x128/0x1a0 [ 1994.551754] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 17:16:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x7400, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x7a00, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x200000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1994.557420] ? security_file_ioctl+0x93/0xc0 [ 1994.561873] ksys_ioctl+0xab/0xd0 [ 1994.565372] __x64_sys_ioctl+0x73/0xb0 [ 1994.569300] do_syscall_64+0x103/0x610 [ 1994.573238] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1994.578458] RIP: 0033:0x458da9 [ 1994.581676] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1994.600607] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1994.608358] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1994.615657] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1994.622952] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1994.622962] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1994.622971] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:21 executing program 2 (fault-call:3 fault-nth:40): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x4c00000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x7000000000000000, 0x0, 0x0, 0x0}) 17:16:21 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x402080, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x9, 0x6}, &(0x7f00000000c0)=0xc) r5 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000400)={r4, 0x1eb, 0x0, 0xd3bb, 0x8}, &(0x7f0000000440)=0x18) getsockopt$inet6_dccp_int(r3, 0x21, 0xf, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f0000000240)={{0x1, 0x3, 0x2, 0x5, 0x3f, 0x1}, 0xbc8, 0x8, 0x8, 0xfffffffffffffffa, 0x494, "3feb4b23ea72286698fb05c20373448ff9f3c90eb23062c3f129e412b0b1109f35b2d94ac4e51f86f29c759866a6d2c019de882cf9cf3b3d6fe82d9e8a38000d6a1e4b5ec05d518baee37c855709b2070033f346e7d58e6cf909e0d0673379507460d19b0579ecc88ba4e5356b62e617b15b910b35ac25bfadcb0fd9a7cb1ea5"}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000100)={r4, 0x9}, 0x8) ioctl$SG_IO(r2, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 17:16:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x1000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x2000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0xeba, 0x80000001, 0x8, 0x1, 0x2e}) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) socketpair(0x10, 0x80000, 0x1000, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x194, r3, 0x600, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0xe0, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffffb9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_MEDIA={0x94, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x194}, 0x1, 0x0, 0x0, 0xc0}, 0x44084) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x7400000000000000, 0x0, 0x0, 0x0}) 17:16:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x6800000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1994.890408] FAULT_INJECTION: forcing a failure. [ 1994.890408] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1995.006673] CPU: 0 PID: 6962 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1995.013610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1995.022998] Call Trace: [ 1995.025626] dump_stack+0x172/0x1f0 [ 1995.029296] should_fail.cold+0xa/0x1b [ 1995.033239] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1995.038383] ? ___might_sleep+0x163/0x280 [ 1995.042595] ? __might_sleep+0x95/0x190 [ 1995.046600] __alloc_pages_nodemask+0x1ee/0x760 [ 1995.051297] ? check_preemption_disabled+0x48/0x290 [ 1995.056367] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1995.061430] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1995.067002] alloc_pages_current+0x107/0x210 [ 1995.071465] get_zeroed_page+0x14/0x50 [ 1995.075425] mon_alloc_buff+0xc2/0x190 [ 1995.079351] ? mon_bin_ioctl+0x48e/0xc80 [ 1995.083455] mon_bin_ioctl+0x4ad/0xc80 [ 1995.087372] ? mon_bin_get_event+0x450/0x450 [ 1995.091821] ? __fget+0x340/0x540 [ 1995.095313] ? ___might_sleep+0x163/0x280 [ 1995.099488] ? __might_sleep+0x95/0x190 17:16:22 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={0xffffffffffffff9c}) accept$nfc_llcp(r0, &(0x7f0000000080), &(0x7f0000000100)=0x60) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) accept4(r0, &(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000400)=0x80, 0x0) bind$bt_hci(r0, &(0x7f0000000440)={0x1f, r3, 0x3}, 0xc) [ 1995.103484] ? mon_bin_get_event+0x450/0x450 [ 1995.107922] do_vfs_ioctl+0xd6e/0x1390 [ 1995.111836] ? selinux_file_ioctl+0x46f/0x5e0 [ 1995.116357] ? selinux_file_ioctl+0x125/0x5e0 [ 1995.122623] ? ioctl_preallocate+0x210/0x210 [ 1995.127057] ? selinux_file_mprotect+0x620/0x620 [ 1995.132024] ? iterate_fd+0x360/0x360 [ 1995.135852] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1995.141426] ? fput+0x128/0x1a0 [ 1995.144750] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1995.150327] ? security_file_ioctl+0x93/0xc0 [ 1995.154777] ksys_ioctl+0xab/0xd0 [ 1995.158281] __x64_sys_ioctl+0x73/0xb0 [ 1995.162216] do_syscall_64+0x103/0x610 [ 1995.166137] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1995.171354] RIP: 0033:0x458da9 [ 1995.171372] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1995.171379] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:16:22 executing program 2 (fault-call:3 fault-nth:41): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x7a00000000000000, 0x0, 0x0, 0x0}) 17:16:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x6c00000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$RTC_WIE_ON(r1, 0x700f) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x8000, 0x0) 17:16:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x3000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x400, 0x111000) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) r2 = memfd_create(&(0x7f00000000c0)='proc\xaemime_typewlan1nodev\x00', 0x6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000003, 0x5011, r2, 0x0) fcntl$addseals(r2, 0x409, 0x4) fallocate(r2, 0x0, 0x0, 0x3c) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x4) ioctl(r0, 0x100000890e, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r3, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1995.171392] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1995.171400] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1995.171407] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1995.171414] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1995.171421] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x4000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x7000000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1995.345987] FAULT_INJECTION: forcing a failure. [ 1995.345987] name fail_page_alloc, interval 1, probability 0, space 0, times 0 17:16:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0xfc00000000000000, 0x0, 0x0, 0x0}) 17:16:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000040)={0x8, 0x0, 0x6, 0x3ff, '\x00', 0x10001}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0)=0xfff, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1995.440922] CPU: 0 PID: 6997 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1995.447863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1995.457241] Call Trace: [ 1995.459863] dump_stack+0x172/0x1f0 [ 1995.463538] should_fail.cold+0xa/0x1b [ 1995.467470] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1995.472609] ? ___might_sleep+0x163/0x280 [ 1995.476786] ? __might_sleep+0x95/0x190 [ 1995.480786] __alloc_pages_nodemask+0x1ee/0x760 [ 1995.485482] ? check_preemption_disabled+0x48/0x290 [ 1995.490532] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1995.495588] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1995.495609] alloc_pages_current+0x107/0x210 [ 1995.495630] get_zeroed_page+0x14/0x50 [ 1995.495644] mon_alloc_buff+0xc2/0x190 [ 1995.495657] ? mon_bin_ioctl+0x48e/0xc80 [ 1995.495679] mon_bin_ioctl+0x4ad/0xc80 [ 1995.521464] ? mon_bin_get_event+0x450/0x450 [ 1995.525908] ? __fget+0x340/0x540 [ 1995.529402] ? ___might_sleep+0x163/0x280 [ 1995.533586] ? __might_sleep+0x95/0x190 [ 1995.537595] ? mon_bin_get_event+0x450/0x450 [ 1995.542036] do_vfs_ioctl+0xd6e/0x1390 [ 1995.545959] ? selinux_file_ioctl+0x46f/0x5e0 [ 1995.550485] ? selinux_file_ioctl+0x125/0x5e0 [ 1995.555021] ? ioctl_preallocate+0x210/0x210 [ 1995.559457] ? selinux_file_mprotect+0x620/0x620 [ 1995.564249] ? iterate_fd+0x360/0x360 [ 1995.568085] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1995.573661] ? fput+0x128/0x1a0 [ 1995.576996] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1995.582578] ? security_file_ioctl+0x93/0xc0 [ 1995.587023] ksys_ioctl+0xab/0xd0 17:16:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0xfeffffff00000000, 0x0, 0x0, 0x0}) [ 1995.590510] __x64_sys_ioctl+0x73/0xb0 [ 1995.594435] do_syscall_64+0x103/0x610 [ 1995.598371] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1995.603585] RIP: 0033:0x458da9 [ 1995.606796] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1995.625735] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1995.625754] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 17:16:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1000000, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr(r0, &(0x7f0000000040)=@random={'osx.', 'cgroupppp0&*em1ppp0\x00'}, &(0x7f0000000100)='\xff', 0x1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x18040, 0x0) ioctl$RTC_WIE_ON(r2, 0x700f) [ 1995.625761] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1995.625768] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1995.625774] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1995.625781] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:22 executing program 2 (fault-call:3 fault-nth:42): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x5000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_emit_ethernet(0x207843, &(0x7f0000000000)={@local, @empty=[0xb], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300008, 0x0, 0x0, @ipv4={[0x207835, 0x0, 0x28, 0x0, 0x6], [], @multicast2}, @mcast2={0xff, 0x4, [], 0x2}, {[], @icmpv6=@time_exceed={0x2b, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x7, 0x42100) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x7400000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0xffffff0f00000000, 0x0, 0x0, 0x0}) 17:16:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$NBD_DO_IT(r0, 0xab03) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000080)=0x401, 0x4) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0)={0x200, 0x10000, 0x7fff, 0x10001, 0x1}, 0x14) 17:16:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x7a00000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x6000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1995.901790] FAULT_INJECTION: forcing a failure. [ 1995.901790] name fail_page_alloc, interval 1, probability 0, space 0, times 0 17:16:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0xffffff7f00000000, 0x0, 0x0, 0x0}) 17:16:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) [ 1996.033343] CPU: 0 PID: 7044 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1996.040275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1996.049729] Call Trace: [ 1996.052369] dump_stack+0x172/0x1f0 [ 1996.056043] should_fail.cold+0xa/0x1b [ 1996.059978] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1996.065102] ? ___might_sleep+0x163/0x280 [ 1996.069281] ? __might_sleep+0x95/0x190 [ 1996.073297] __alloc_pages_nodemask+0x1ee/0x760 [ 1996.078101] ? fs_reclaim_acquire+0x20/0x20 17:16:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x7000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1996.082455] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1996.088023] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1996.093085] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1996.098655] alloc_pages_current+0x107/0x210 [ 1996.103106] get_zeroed_page+0x14/0x50 [ 1996.107022] mon_alloc_buff+0xc2/0x190 [ 1996.110930] ? mon_bin_ioctl+0x48e/0xc80 [ 1996.110948] mon_bin_ioctl+0x4ad/0xc80 [ 1996.110967] ? mon_bin_get_event+0x450/0x450 [ 1996.110983] ? __fget+0x340/0x540 [ 1996.111002] ? ___might_sleep+0x163/0x280 [ 1996.111021] ? __might_sleep+0x95/0x190 [ 1996.118985] ? mon_bin_get_event+0x450/0x450 [ 1996.119008] do_vfs_ioctl+0xd6e/0x1390 [ 1996.119025] ? selinux_file_ioctl+0x46f/0x5e0 [ 1996.119042] ? selinux_file_ioctl+0x125/0x5e0 [ 1996.152357] ? ioctl_preallocate+0x210/0x210 [ 1996.156797] ? selinux_file_mprotect+0x620/0x620 [ 1996.161587] ? iterate_fd+0x360/0x360 [ 1996.165417] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1996.170990] ? fput+0x128/0x1a0 [ 1996.174318] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1996.179881] ? security_file_ioctl+0x93/0xc0 [ 1996.184337] ksys_ioctl+0xab/0xd0 [ 1996.187830] __x64_sys_ioctl+0x73/0xb0 [ 1996.191756] do_syscall_64+0x103/0x610 [ 1996.195678] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1996.200894] RIP: 0033:0x458da9 [ 1996.200912] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1996.200921] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:16:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}) [ 1996.200935] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1996.200943] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1996.200951] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1996.200959] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1996.200967] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:23 executing program 2 (fault-call:3 fault-nth:43): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = semget$private(0x0, 0x0, 0x20a) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000040)=""/38) r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x2800) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000100)=0x3) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000380)=""/209) ioctl$SG_IO(r3, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0xac00000000000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x8000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x9bf, &(0x7f0000000080)="de96000000008cc65de6aa3e2870") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x509002, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x6) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) [ 1996.329921] scsi_io_completion_action: 49 callbacks suppressed [ 1996.329954] sd 0:0:1:0: [sg0] tag#432 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1996.344928] sd 0:0:1:0: [sg0] tag#432 CDB: opcode=0xe5 (vendor) [ 1996.351100] sd 0:0:1:0: [sg0] tag#432 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1996.359899] sd 0:0:1:0: [sg0] tag#432 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1996.368806] sd 0:0:1:0: [sg0] tag#432 CDB[20]: a0 [ 1996.398271] sd 0:0:1:0: [sg0] tag#601 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1996.407263] sd 0:0:1:0: [sg0] tag#601 CDB: opcode=0xe5 (vendor) [ 1996.413511] sd 0:0:1:0: [sg0] tag#601 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1996.422415] sd 0:0:1:0: [sg0] tag#601 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1996.431298] sd 0:0:1:0: [sg0] tag#601 CDB[20]: a0 [ 1996.437796] sd 0:0:1:0: [sg0] tag#432 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1996.446592] sd 0:0:1:0: [sg0] tag#432 CDB: opcode=0xe5 (vendor) [ 1996.452991] sd 0:0:1:0: [sg0] tag#432 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1996.461865] sd 0:0:1:0: [sg0] tag#432 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1996.470721] sd 0:0:1:0: [sg0] tag#432 CDB[20]: a0 17:16:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'nr0\x00', {0x2, 0x4e24, @local}}) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1996.495782] FAULT_INJECTION: forcing a failure. [ 1996.495782] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1996.530645] CPU: 0 PID: 7087 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1996.537585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 17:16:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0xfeffffff00000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1996.546969] Call Trace: [ 1996.549599] dump_stack+0x172/0x1f0 [ 1996.553275] should_fail.cold+0xa/0x1b [ 1996.557216] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1996.562360] ? ___might_sleep+0x163/0x280 [ 1996.566545] ? __might_sleep+0x95/0x190 [ 1996.570549] __alloc_pages_nodemask+0x1ee/0x760 [ 1996.575246] ? check_preemption_disabled+0x48/0x290 [ 1996.580291] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1996.585380] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1996.590954] alloc_pages_current+0x107/0x210 [ 1996.595395] get_zeroed_page+0x14/0x50 [ 1996.599311] mon_alloc_buff+0xc2/0x190 [ 1996.599326] ? mon_bin_ioctl+0x48e/0xc80 [ 1996.599345] mon_bin_ioctl+0x4ad/0xc80 [ 1996.611226] ? mon_bin_get_event+0x450/0x450 [ 1996.616103] ? __fget+0x340/0x540 [ 1996.619584] ? ___might_sleep+0x163/0x280 [ 1996.623759] ? __might_sleep+0x95/0x190 [ 1996.627760] ? mon_bin_get_event+0x450/0x450 [ 1996.632203] do_vfs_ioctl+0xd6e/0x1390 [ 1996.636125] ? selinux_file_ioctl+0x46f/0x5e0 [ 1996.640649] ? selinux_file_ioctl+0x125/0x5e0 [ 1996.645182] ? ioctl_preallocate+0x210/0x210 [ 1996.647366] sd 0:0:1:0: [sg0] tag#432 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1996.649615] ? selinux_file_mprotect+0x620/0x620 [ 1996.649643] ? iterate_fd+0x360/0x360 [ 1996.649665] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1996.649685] ? fput+0x128/0x1a0 [ 1996.658428] sd 0:0:1:0: [sg0] tag#432 CDB: opcode=0xe5 (vendor) [ 1996.663088] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1996.663107] ? security_file_ioctl+0x93/0xc0 [ 1996.663126] ksys_ioctl+0xab/0xd0 [ 1996.663146] __x64_sys_ioctl+0x73/0xb0 [ 1996.663162] do_syscall_64+0x103/0x610 [ 1996.663181] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1996.663192] RIP: 0033:0x458da9 [ 1996.663209] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1996.663217] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1996.667053] sd 0:0:1:0: [sg0] tag#432 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1996.672574] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1996.672583] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1996.672590] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1996.672598] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1996.672605] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x2, 0x0, 0x0}) 17:16:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$security_selinux(r0, &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:lastlog_t:s0\x00', 0x1f, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x40, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000280)=0x3) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x1f, "4282eb6f80a92e5a32ddab5e03446a74f1ad56d8292f16d297d2ba42e9cb2b"}, &(0x7f00000000c0)=0x27) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000100)={r4, 0x4}, 0x8) ioctl$SG_IO(r2, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, {0x5, 0x6e6e, 0x6ad, 0x81, 0x4, 0x8000}, 0x10001}, 0xa) [ 1996.739340] sd 0:0:1:0: [sg0] tag#432 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1996.802322] sd 0:0:1:0: [sg0] tag#432 CDB[20]: a0 17:16:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0xfffffff, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1996.844065] audit: type=1400 audit(1556903783.908:150): avc: denied { relabelto } for pid=7101 comm="syz-executor.5" name="UDP-Lite" dev="sockfs" ino=308014 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:lastlog_t:s0 tclass=rawip_socket permissive=1 17:16:23 executing program 2 (fault-call:3 fault-nth:44): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}) [ 1996.898504] sd 0:0:1:0: [sg0] tag#432 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1996.907275] sd 0:0:1:0: [sg0] tag#432 CDB: opcode=0xe5 (vendor) [ 1996.913510] sd 0:0:1:0: [sg0] tag#432 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1996.922577] sd 0:0:1:0: [sg0] tag#432 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1996.931492] sd 0:0:1:0: [sg0] tag#432 CDB[20]: a0 17:16:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0xffffff0f00000000, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1996.994505] FAULT_INJECTION: forcing a failure. [ 1996.994505] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1997.039901] sd 0:0:1:0: [sg0] tag#649 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1997.040915] CPU: 1 PID: 7111 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1997.048868] sd 0:0:1:0: [sg0] tag#649 CDB: opcode=0xe5 (vendor) [ 1997.055439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1997.055446] Call Trace: [ 1997.055474] dump_stack+0x172/0x1f0 [ 1997.055495] should_fail.cold+0xa/0x1b [ 1997.055516] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1997.061658] sd 0:0:1:0: [sg0] tag#649 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1997.070975] ? ___might_sleep+0x163/0x280 [ 1997.070994] ? __might_sleep+0x95/0x190 [ 1997.071012] __alloc_pages_nodemask+0x1ee/0x760 [ 1997.071032] ? check_preemption_disabled+0x48/0x290 [ 1997.071051] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1997.073663] sd 0:0:1:0: [sg0] tag#649 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1997.077312] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1997.081273] sd 0:0:1:0: [sg0] tag#649 CDB[20]: a0 [ 1997.086323] alloc_pages_current+0x107/0x210 [ 1997.086348] get_zeroed_page+0x14/0x50 [ 1997.086364] mon_alloc_buff+0xc2/0x190 [ 1997.086382] ? mon_bin_ioctl+0x48e/0xc80 [ 1997.153438] mon_bin_ioctl+0x4ad/0xc80 [ 1997.157363] ? mon_bin_get_event+0x450/0x450 [ 1997.161808] ? __fget+0x340/0x540 [ 1997.165286] ? ___might_sleep+0x163/0x280 [ 1997.169464] ? __might_sleep+0x95/0x190 [ 1997.169483] ? mon_bin_get_event+0x450/0x450 [ 1997.169505] do_vfs_ioctl+0xd6e/0x1390 [ 1997.169525] ? selinux_file_ioctl+0x46f/0x5e0 [ 1997.181803] ? selinux_file_ioctl+0x125/0x5e0 [ 1997.181825] ? ioctl_preallocate+0x210/0x210 [ 1997.181838] ? selinux_file_mprotect+0x620/0x620 [ 1997.181864] ? iterate_fd+0x360/0x360 [ 1997.181903] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1997.209397] ? fput+0x128/0x1a0 [ 1997.212715] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1997.218288] ? security_file_ioctl+0x93/0xc0 [ 1997.222834] ksys_ioctl+0xab/0xd0 [ 1997.223994] sd 0:0:1:0: [sg0] tag#649 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1997.226345] __x64_sys_ioctl+0x73/0xb0 17:16:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x3, 0x0, 0x0}) 17:16:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x1f000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1997.226368] do_syscall_64+0x103/0x610 [ 1997.226392] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1997.235068] sd 0:0:1:0: [sg0] tag#649 CDB: opcode=0xe5 (vendor) [ 1997.238888] RIP: 0033:0x458da9 [ 1997.242882] sd 0:0:1:0: [sg0] tag#649 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1997.247977] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 17:16:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x44000, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="07e8f205d46e2b6b507591946f891516", 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1997.254149] sd 0:0:1:0: [sg0] tag#649 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1997.257266] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 [ 1997.266129] sd 0:0:1:0: [sg0] tag#649 CDB[20]: a0 [ 1997.284955] ORIG_RAX: 0000000000000010 [ 1997.284967] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1997.284974] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1997.284981] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1997.284988] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 17:16:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000080)={0x3, 0xffffffffffffffff, 0x1000, 0x6, 0x9, 0x0, 0x9, 0x6, 0xc9, 0xffffffff}, 0x10) ioctl$VIDIOC_RESERVED(r1, 0x5601, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$SG_IO(0xffffffffffffffff, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1997.284995] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 [ 1997.327207] sd 0:0:1:0: [sg0] tag#649 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1997.354576] sd 0:0:1:0: [sg0] tag#649 CDB: opcode=0xe5 (vendor) [ 1997.360787] sd 0:0:1:0: [sg0] tag#649 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1997.369598] sd 0:0:1:0: [sg0] tag#649 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1997.378568] sd 0:0:1:0: [sg0] tag#649 CDB[20]: a0 17:16:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:24 executing program 2 (fault-call:3 fault-nth:45): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) [ 1997.455654] sd 0:0:1:0: [sg0] tag#649 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1997.464667] sd 0:0:1:0: [sg0] tag#649 CDB: opcode=0xe5 (vendor) [ 1997.470853] sd 0:0:1:0: [sg0] tag#649 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1997.479654] sd 0:0:1:0: [sg0] tag#649 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1997.488502] sd 0:0:1:0: [sg0] tag#649 CDB[20]: a0 17:16:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x80000, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0xffffffffffffffff, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) clone(0x400, &(0x7f0000000040)="c8c6c973a7e5a8829fcec8f0c79c97c3506a2484e7acbb0d7ee987aef174f215686022e6f72822e386c97873d52e51d69170a8966963e71747140736624ee61afcf19ee2432aec66429519323938fe00d063bb621caedcc2d851868ac33c2c0ddbbaea783580adf81d08f361e2eab4a9fcad061235127e0e75b860da3b94f77f38de7956ea4065cace25cb76b450dc9f8081231f25af7c293d3f010e471e3d85a95cecbc2ac7d6cbb483d0e5982053a786058300634dd295f8d4dc9966ae2b6c8554c2b9c8ee82b7c899e26c558f5a95e3c10fe8d52af9df1061c03ab927dc58ae2e329980c9dfe077cab23c707a5fe4ce65", &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="79cc79f03a9ca73f5957b0e58ce300ab8446e6d0d66434ec91e109cb1bbe08110ba09e7c37c2") ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @scatter={0x5, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/5, 0x5}, {&(0x7f0000000280)=""/83, 0x53}, {&(0x7f0000000380)=""/206, 0xce}, {&(0x7f0000000480)=""/209, 0xd1}, {&(0x7f0000000580)=""/39, 0x27}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$media(&(0x7f0000000640)='/dev/media#\x00', 0x8, 0x200000) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000006c0)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, r3, 0x201, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) 17:16:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x20000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1997.639391] sd 0:0:1:0: [sg0] tag#395 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1997.648284] sd 0:0:1:0: [sg0] tag#395 CDB: opcode=0xe5 (vendor) [ 1997.654560] sd 0:0:1:0: [sg0] tag#395 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 1997.663459] sd 0:0:1:0: [sg0] tag#395 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 1997.672417] sd 0:0:1:0: [sg0] tag#395 CDB[20]: a0 [ 1997.675567] FAULT_INJECTION: forcing a failure. [ 1997.675567] name fail_page_alloc, interval 1, probability 0, space 0, times 0 17:16:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x5, 0x0, 0x0}) 17:16:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x10, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x80) getpeername$tipc(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x10) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000000540)=0xe8) connect$can_bcm(r2, &(0x7f0000000580)={0x1d, r3}, 0x10) [ 1997.822122] CPU: 0 PID: 7151 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1997.829048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1997.838433] Call Trace: [ 1997.841052] dump_stack+0x172/0x1f0 [ 1997.844728] should_fail.cold+0xa/0x1b [ 1997.848654] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1997.853804] ? ___might_sleep+0x163/0x280 [ 1997.857983] ? __might_sleep+0x95/0x190 [ 1997.861990] __alloc_pages_nodemask+0x1ee/0x760 [ 1997.866708] ? check_preemption_disabled+0x48/0x290 [ 1997.871766] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1997.876823] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1997.882404] alloc_pages_current+0x107/0x210 [ 1997.886854] get_zeroed_page+0x14/0x50 [ 1997.890773] mon_alloc_buff+0xc2/0x190 [ 1997.894687] ? mon_bin_ioctl+0x48e/0xc80 [ 1997.898784] mon_bin_ioctl+0x4ad/0xc80 [ 1997.902733] ? mon_bin_get_event+0x450/0x450 [ 1997.907178] ? __fget+0x340/0x540 [ 1997.910660] ? ___might_sleep+0x163/0x280 [ 1997.914844] ? __might_sleep+0x95/0x190 17:16:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x6, 0x0, 0x0}) [ 1997.918845] ? mon_bin_get_event+0x450/0x450 [ 1997.923281] do_vfs_ioctl+0xd6e/0x1390 [ 1997.927202] ? selinux_file_ioctl+0x46f/0x5e0 [ 1997.931732] ? selinux_file_ioctl+0x125/0x5e0 [ 1997.936259] ? ioctl_preallocate+0x210/0x210 [ 1997.940697] ? selinux_file_mprotect+0x620/0x620 [ 1997.945501] ? iterate_fd+0x360/0x360 [ 1997.949367] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1997.954937] ? fput+0x128/0x1a0 [ 1997.958255] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1997.963825] ? security_file_ioctl+0x93/0xc0 [ 1997.968278] ksys_ioctl+0xab/0xd0 17:16:25 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x101, 0x200100) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000000c0)) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000240)=""/70) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100), 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x20000, 0x0) [ 1997.971786] __x64_sys_ioctl+0x73/0xb0 [ 1997.975722] do_syscall_64+0x103/0x610 [ 1997.979652] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1997.984903] RIP: 0033:0x458da9 [ 1997.988128] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1998.007097] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1998.007118] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 17:16:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x48000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1998.007125] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1998.007132] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1998.007139] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1998.007146] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x20000121, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:25 executing program 2 (fault-call:3 fault-nth:46): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x4c000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x7, 0x0, 0x0}) 17:16:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f00000000c0)={0x3, 0x5a13}) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x4, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x2, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x5d000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x8, 0x0, 0x0}) [ 1998.388102] FAULT_INJECTION: forcing a failure. [ 1998.388102] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1998.433510] CPU: 1 PID: 7210 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1998.440436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1998.449910] Call Trace: [ 1998.452550] dump_stack+0x172/0x1f0 [ 1998.456233] should_fail.cold+0xa/0x1b [ 1998.460165] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1998.465318] ? ___might_sleep+0x163/0x280 [ 1998.469688] ? __might_sleep+0x95/0x190 [ 1998.473702] __alloc_pages_nodemask+0x1ee/0x760 [ 1998.478416] ? check_preemption_disabled+0x48/0x290 [ 1998.483473] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1998.483506] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1998.494118] alloc_pages_current+0x107/0x210 [ 1998.494141] get_zeroed_page+0x14/0x50 [ 1998.494155] mon_alloc_buff+0xc2/0x190 [ 1998.494166] ? mon_bin_ioctl+0x48e/0xc80 [ 1998.494181] mon_bin_ioctl+0x4ad/0xc80 [ 1998.494213] ? mon_bin_get_event+0x450/0x450 [ 1998.518964] ? __fget+0x340/0x540 [ 1998.518986] ? ___might_sleep+0x163/0x280 [ 1998.519004] ? __might_sleep+0x95/0x190 [ 1998.530721] ? mon_bin_get_event+0x450/0x450 [ 1998.530744] do_vfs_ioctl+0xd6e/0x1390 [ 1998.530761] ? selinux_file_ioctl+0x46f/0x5e0 [ 1998.530772] ? selinux_file_ioctl+0x125/0x5e0 [ 1998.530790] ? ioctl_preallocate+0x210/0x210 [ 1998.530809] ? selinux_file_mprotect+0x620/0x620 [ 1998.557471] ? iterate_fd+0x360/0x360 [ 1998.561329] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1998.566900] ? fput+0x128/0x1a0 [ 1998.570231] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1998.575811] ? security_file_ioctl+0x93/0xc0 [ 1998.580262] ksys_ioctl+0xab/0xd0 [ 1998.583766] __x64_sys_ioctl+0x73/0xb0 [ 1998.587782] do_syscall_64+0x103/0x610 [ 1998.591712] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1998.596933] RIP: 0033:0x458da9 [ 1998.600159] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1998.619108] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:16:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x60000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x3, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40041) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000080)={0x6, 0x8001, 0x1, 0x0, 0x4, 0x4, 0x3ff}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x90, r3, 0xe00, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x28}}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x90}}, 0x0) 17:16:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x10, 0x0, 0x0}) [ 1998.619128] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1998.619135] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1998.619142] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1998.619149] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1998.619156] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:25 executing program 2 (fault-call:3 fault-nth:47): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)={0x1, 0x40, 0x40, 0x400, 0x6, 0x3}) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) 17:16:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x48, 0x0, 0x0}) 17:16:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x4, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x68000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x101000, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000180)) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000140)={0x1}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000240)={0x0, 0x0, [], @raw_data=[0xffff, 0x0, 0x6, 0x6, 0x4000000000, 0x6, 0x1, 0x9532, 0x655f, 0x2, 0x379afc96, 0x0, 0x1, 0x0, 0xfffffffffffffff9, 0x2, 0x5, 0x1, 0xaae, 0x92, 0x8, 0x9, 0x4, 0x4, 0x4, 0x78ba, 0x3, 0x0, 0x401, 0x9, 0x101]}) 17:16:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4c, 0x0, 0x0}) [ 1998.939836] FAULT_INJECTION: forcing a failure. [ 1998.939836] name fail_page_alloc, interval 1, probability 0, space 0, times 0 17:16:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = accept(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000000c0)=0x80) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x0, 0xc0c86169b5a91fb4, 0x8000, 0x5fd0}, &(0x7f0000000140)=0x18) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={r2, 0x3}, 0x8) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r3, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x5, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1999.024257] CPU: 0 PID: 7255 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1999.031197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1999.040580] Call Trace: [ 1999.043206] dump_stack+0x172/0x1f0 [ 1999.046876] should_fail.cold+0xa/0x1b [ 1999.050800] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1999.055931] ? ___might_sleep+0x163/0x280 [ 1999.060115] ? __might_sleep+0x95/0x190 [ 1999.064139] __alloc_pages_nodemask+0x1ee/0x760 [ 1999.068834] ? __kmalloc+0x587/0x750 17:16:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x5, 0x6, 0x90}) [ 1999.072573] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1999.077629] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1999.083207] alloc_pages_current+0x107/0x210 [ 1999.087678] get_zeroed_page+0x14/0x50 [ 1999.091599] mon_alloc_buff+0xc2/0x190 [ 1999.095512] ? mon_bin_ioctl+0x48e/0xc80 [ 1999.099595] mon_bin_ioctl+0x4ad/0xc80 [ 1999.099618] ? mon_bin_get_event+0x450/0x450 [ 1999.099640] ? __fget+0x340/0x540 [ 1999.107969] ? ___might_sleep+0x163/0x280 [ 1999.107993] ? __might_sleep+0x95/0x190 [ 1999.119591] ? mon_bin_get_event+0x450/0x450 17:16:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x60, 0x0, 0x0}) [ 1999.124039] do_vfs_ioctl+0xd6e/0x1390 [ 1999.127954] ? selinux_file_ioctl+0x46f/0x5e0 [ 1999.132472] ? selinux_file_ioctl+0x125/0x5e0 [ 1999.137003] ? ioctl_preallocate+0x210/0x210 [ 1999.141439] ? selinux_file_mprotect+0x620/0x620 [ 1999.146230] ? iterate_fd+0x360/0x360 [ 1999.150072] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1999.150088] ? fput+0x128/0x1a0 [ 1999.150109] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1999.164514] ? security_file_ioctl+0x93/0xc0 [ 1999.168960] ksys_ioctl+0xab/0xd0 [ 1999.172450] __x64_sys_ioctl+0x73/0xb0 [ 1999.176378] do_syscall_64+0x103/0x610 [ 1999.180313] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1999.185625] RIP: 0033:0x458da9 [ 1999.188843] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1999.207769] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1999.215526] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 17:16:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x6c000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1999.222830] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1999.230138] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1999.237453] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1999.244761] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:26 executing program 2 (fault-call:3 fault-nth:48): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:26 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x0, 0x488002) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x0, 0x0) fanotify_mark(r0, 0xf, 0x40000000, r1, &(0x7f0000000240)='./file0\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) getpgrp(r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x4, &(0x7f0000000140)="f832f1e7f4f252b0f2f2620c2bbd235e28160cb9bbc7a17bd070") r4 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r4, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x10000) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x3, 0x3}, 0x10) fsetxattr$security_smack_transmute(r4, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x3) setpriority(0x2, r2, 0xc30) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 17:16:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x70000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x68, 0x0, 0x0}) 17:16:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x6, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f12a50d3f319bd03b") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000001, 0x40002) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0)=0x1, &(0x7f0000000100)=0x2) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000040)) r3 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_RMID(r3, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x2, 0x1) 17:16:26 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0xd6, 0x9, @buffer={0x0, 0x98, &(0x7f0000000080)=""/152}, &(0x7f0000000380)="f4c1799de7142adffe6fbe21e8de3fa57e576704cbcf7082b0411cebe666a2c71eb935295d3037f9fc75ee5b4eecb2438f9840443a6a0cb354facabbcbcfc7ca16ff448571ba2a9b05e8a72a2b66c98dfe68cdeaaea7e8f51db6c73736d83d586a2af263b534a0dd97c1c98a002d9503139c329052ce258c367a4c76a04f29b81cc933a1443aa6744d5d45959e8e34b71807d56fbb4272defaa297c2cdbc74f3c0fc586adb498b4ae5853f2797cfa083899a7eb237cef0947bfb181873131bcc7de021e1be9925607f87ba2ee87baf4d917326d01a08", &(0x7f0000000140)=""/179, 0xff, 0x10, 0xffffffffffffffff, &(0x7f0000000240)}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1999.513256] FAULT_INJECTION: forcing a failure. [ 1999.513256] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1999.540472] CPU: 1 PID: 7293 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 1999.547402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1999.556795] Call Trace: [ 1999.559615] dump_stack+0x172/0x1f0 [ 1999.563292] should_fail.cold+0xa/0x1b [ 1999.567252] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1999.572390] ? ___might_sleep+0x163/0x280 [ 1999.576571] ? __might_sleep+0x95/0x190 [ 1999.580601] __alloc_pages_nodemask+0x1ee/0x760 [ 1999.585366] ? fs_reclaim_acquire+0x20/0x20 [ 1999.589738] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1999.595333] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1999.600411] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1999.605986] alloc_pages_current+0x107/0x210 [ 1999.610433] get_zeroed_page+0x14/0x50 [ 1999.614357] mon_alloc_buff+0xc2/0x190 [ 1999.618271] ? mon_bin_ioctl+0x48e/0xc80 [ 1999.622378] mon_bin_ioctl+0x4ad/0xc80 [ 1999.626315] ? mon_bin_get_event+0x450/0x450 [ 1999.630759] ? __fget+0x340/0x540 [ 1999.634350] ? ___might_sleep+0x163/0x280 [ 1999.638537] ? __might_sleep+0x95/0x190 [ 1999.642545] ? mon_bin_get_event+0x450/0x450 [ 1999.646987] do_vfs_ioctl+0xd6e/0x1390 [ 1999.650898] ? selinux_file_ioctl+0x46f/0x5e0 [ 1999.655782] ? selinux_file_ioctl+0x125/0x5e0 [ 1999.660313] ? ioctl_preallocate+0x210/0x210 [ 1999.664745] ? selinux_file_mprotect+0x620/0x620 [ 1999.669617] ? iterate_fd+0x360/0x360 [ 1999.673452] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1999.679019] ? fput+0x128/0x1a0 [ 1999.682345] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1999.688010] ? security_file_ioctl+0x93/0xc0 [ 1999.692485] ksys_ioctl+0xab/0xd0 [ 1999.695969] __x64_sys_ioctl+0x73/0xb0 [ 1999.699919] do_syscall_64+0x103/0x610 [ 1999.703841] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1999.709048] RIP: 0033:0x458da9 [ 1999.712269] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1999.731223] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1999.738977] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 1999.746448] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 1999.753745] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 17:16:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x74000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x100ffe, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000080)=0x6) 17:16:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x7a000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={r1, 0x8c, "56b994c8a04124be2ac073e1e794ae51ab1c0a00657a329eacd00e0dda645f6eb62177c68cd8d9944ca5e420d1414cf63725b60d1727f5ddbbec9e8dbe5beba6d0ea035e1df6823a978f5df48e7ab67d99f7901a4b8a1bd27bed9893f526d51e1224167e19cb8f2eb95e1137e2369714cd182b5a3b1f0d50cf46b89aaeb4eead63a03c1b1b74375d10ab87d8"}, &(0x7f0000000180)=0x94) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) 17:16:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0xfeffffff, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1999.761130] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 1999.768439] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:27 executing program 2 (fault-call:3 fault-nth:49): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x220000, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x80, @tick=0x9, 0x10001, {0x1f, 0xffff}, 0xff, 0x0, 0x7}) 17:16:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x6c, 0x0, 0x0}) 17:16:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100, &(0x7f0000000080)="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") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7c, 0x2000) sendto$rose(r2, &(0x7f0000000380)="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", 0xfe, 0x4000000, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x7, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0xffffff0f, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0xffffff7f, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x70, 0x0, 0x0}) [ 2000.039401] FAULT_INJECTION: forcing a failure. [ 2000.039401] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2000.086090] CPU: 1 PID: 7344 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 2000.093025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2000.093034] Call Trace: [ 2000.093064] dump_stack+0x172/0x1f0 [ 2000.093091] should_fail.cold+0xa/0x1b [ 2000.093111] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2000.093129] ? ___might_sleep+0x163/0x280 [ 2000.093147] ? __might_sleep+0x95/0x190 [ 2000.093168] __alloc_pages_nodemask+0x1ee/0x760 [ 2000.093198] ? check_preemption_disabled+0x48/0x290 [ 2000.093220] ? __alloc_pages_slowpath+0x2870/0x2870 [ 2000.093253] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2000.093276] alloc_pages_current+0x107/0x210 [ 2000.140951] get_zeroed_page+0x14/0x50 [ 2000.154837] mon_alloc_buff+0xc2/0x190 [ 2000.158764] ? mon_bin_ioctl+0x48e/0xc80 [ 2000.162866] mon_bin_ioctl+0x4ad/0xc80 [ 2000.166798] ? mon_bin_get_event+0x450/0x450 [ 2000.171243] ? __fget+0x340/0x540 [ 2000.171265] ? ___might_sleep+0x163/0x280 [ 2000.171282] ? __might_sleep+0x95/0x190 [ 2000.171311] ? mon_bin_get_event+0x450/0x450 [ 2000.171332] do_vfs_ioctl+0xd6e/0x1390 [ 2000.171353] ? selinux_file_ioctl+0x46f/0x5e0 [ 2000.182971] ? selinux_file_ioctl+0x125/0x5e0 [ 2000.182993] ? ioctl_preallocate+0x210/0x210 [ 2000.183006] ? selinux_file_mprotect+0x620/0x620 [ 2000.183029] ? iterate_fd+0x360/0x360 [ 2000.183050] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2000.183069] ? fput+0x128/0x1a0 [ 2000.222232] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2000.227822] ? security_file_ioctl+0x93/0xc0 [ 2000.232295] ksys_ioctl+0xab/0xd0 [ 2000.235812] __x64_sys_ioctl+0x73/0xb0 [ 2000.239738] do_syscall_64+0x103/0x610 [ 2000.243666] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2000.248886] RIP: 0033:0x458da9 [ 2000.252110] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2000.271041] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2000.278788] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 17:16:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet6_dccp_buf(r1, 0x21, 0xe, &(0x7f0000000080)=""/243, &(0x7f0000000180)=0xf3) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f00000001c0)) 17:16:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xffff, 0x40) connect$llc(r2, &(0x7f0000000080)={0x1a, 0x30b, 0x100000000, 0x3, 0x6, 0x80, @dev={[], 0xc}}, 0x10) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f00000000c0)) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x8000) mknodat(r2, &(0x7f0000000100)='./file0\x00', 0x800, 0x2) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x78e6, 0x101000) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25GETUID(r3, 0x89e0, &(0x7f00000001c0)={0x3, @bcast, r4}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000080)={0x8, 0x2, 0x1000}) [ 2000.286093] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 2000.293391] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2000.300688] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 2000.307992] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:27 executing program 2 (fault-call:3 fault-nth:50): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x48, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000140)=@v3={0x3000000, [{0x3, 0x4}, {0x0, 0x4af}], r2}, 0x18, 0x1) 17:16:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0xfffffffe, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x74, 0x0, 0x0}) 17:16:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x18, 0x100) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000080)=0x59) 17:16:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x200, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x1000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2000.571710] FAULT_INJECTION: forcing a failure. [ 2000.571710] name fail_page_alloc, interval 1, probability 0, space 0, times 0 17:16:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x7a, 0x0, 0x0}) [ 2000.664317] CPU: 1 PID: 7383 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 2000.671257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2000.685468] Call Trace: [ 2000.690373] dump_stack+0x172/0x1f0 [ 2000.694054] should_fail.cold+0xa/0x1b [ 2000.697981] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2000.703115] ? ___might_sleep+0x163/0x280 [ 2000.707317] ? __might_sleep+0x95/0x190 [ 2000.711347] __alloc_pages_nodemask+0x1ee/0x760 [ 2000.716065] ? fs_reclaim_acquire+0x20/0x20 [ 2000.720429] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2000.726009] ? __alloc_pages_slowpath+0x2870/0x2870 [ 2000.731087] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2000.736668] alloc_pages_current+0x107/0x210 [ 2000.741137] get_zeroed_page+0x14/0x50 [ 2000.745068] mon_alloc_buff+0xc2/0x190 [ 2000.748989] ? mon_bin_ioctl+0x48e/0xc80 [ 2000.753092] mon_bin_ioctl+0x4ad/0xc80 [ 2000.757023] ? mon_bin_get_event+0x450/0x450 [ 2000.761467] ? __fget+0x340/0x540 [ 2000.764966] ? ___might_sleep+0x163/0x280 [ 2000.769150] ? __might_sleep+0x95/0x190 [ 2000.773162] ? mon_bin_get_event+0x450/0x450 [ 2000.777617] do_vfs_ioctl+0xd6e/0x1390 [ 2000.781559] ? selinux_file_ioctl+0x46f/0x5e0 [ 2000.786258] ? selinux_file_ioctl+0x125/0x5e0 [ 2000.790802] ? ioctl_preallocate+0x210/0x210 [ 2000.795242] ? selinux_file_mprotect+0x620/0x620 [ 2000.800031] ? iterate_fd+0x360/0x360 [ 2000.803871] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2000.809524] ? fput+0x128/0x1a0 [ 2000.812838] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2000.818425] ? security_file_ioctl+0x93/0xc0 [ 2000.823384] ksys_ioctl+0xab/0xd0 [ 2000.826863] __x64_sys_ioctl+0x73/0xb0 [ 2000.830780] do_syscall_64+0x103/0x610 [ 2000.834709] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2000.839924] RIP: 0033:0x458da9 [ 2000.843143] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 17:16:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x4c, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0xfc, 0x0, 0x0}) 17:16:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x300, 0x0, 0x0}) [ 2000.862087] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2000.869830] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 2000.877121] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 2000.884416] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2000.884425] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 2000.884433] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:28 executing program 2 (fault-call:3 fault-nth:51): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x68, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) r2 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x1, 0x1a8, [0x0, 0x20000180, 0x200001b0, 0x200001e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]}, 0x220) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2400, 0x0) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000000380)) 17:16:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x500, 0x0, 0x0}) 17:16:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) rt_sigpending(&(0x7f0000000480), 0x8) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4000, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000280)={0x0, 0xfffffffffffffffc, 0xd, 0xd9, @buffer={0x0, 0x46, &(0x7f0000000140)=""/70}, &(0x7f00000001c0)="9993109ce6f2de568d741ea483", &(0x7f0000000380)=""/215, 0xcec4, 0x10010, 0x3, &(0x7f0000000240)}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc2b234248443b9b2070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000100)) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x20000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x100000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x6c, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2001.090042] x_tables: eb_tables: 802_3.0 match: invalid size 8 (kernel) != (user) 0 17:16:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x600, 0x0, 0x0}) 17:16:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x50, 0x8) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2001.139629] x_tables: eb_tables: 802_3.0 match: invalid size 8 (kernel) != (user) 0 [ 2001.158296] FAULT_INJECTION: forcing a failure. [ 2001.158296] name fail_page_alloc, interval 1, probability 0, space 0, times 0 17:16:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x7, 0x300) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2001.229454] CPU: 0 PID: 7429 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 2001.236389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2001.245778] Call Trace: [ 2001.248414] dump_stack+0x172/0x1f0 [ 2001.252090] should_fail.cold+0xa/0x1b [ 2001.256022] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2001.261161] ? ___might_sleep+0x163/0x280 [ 2001.265360] ? __might_sleep+0x95/0x190 [ 2001.269375] __alloc_pages_nodemask+0x1ee/0x760 [ 2001.274082] ? fs_reclaim_acquire+0x20/0x20 17:16:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x200000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2001.278438] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2001.284102] ? __alloc_pages_slowpath+0x2870/0x2870 [ 2001.289193] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2001.294783] alloc_pages_current+0x107/0x210 [ 2001.299236] get_zeroed_page+0x14/0x50 [ 2001.303150] mon_alloc_buff+0xc2/0x190 [ 2001.303163] ? mon_bin_ioctl+0x48e/0xc80 [ 2001.303178] mon_bin_ioctl+0x4ad/0xc80 [ 2001.303197] ? mon_bin_get_event+0x450/0x450 [ 2001.303212] ? __fget+0x340/0x540 [ 2001.303230] ? ___might_sleep+0x163/0x280 [ 2001.303245] ? __might_sleep+0x95/0x190 [ 2001.303261] ? mon_bin_get_event+0x450/0x450 [ 2001.303284] do_vfs_ioctl+0xd6e/0x1390 [ 2001.311269] ? selinux_file_ioctl+0x46f/0x5e0 [ 2001.311282] ? selinux_file_ioctl+0x125/0x5e0 [ 2001.311311] ? ioctl_preallocate+0x210/0x210 [ 2001.311324] ? selinux_file_mprotect+0x620/0x620 [ 2001.311347] ? iterate_fd+0x360/0x360 [ 2001.311367] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2001.311381] ? fput+0x128/0x1a0 [ 2001.311403] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2001.311422] ? security_file_ioctl+0x93/0xc0 [ 2001.311441] ksys_ioctl+0xab/0xd0 [ 2001.384370] __x64_sys_ioctl+0x73/0xb0 [ 2001.385036] scsi_io_completion_action: 47 callbacks suppressed [ 2001.385069] sd 0:0:1:0: [sg0] tag#443 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2001.388297] do_syscall_64+0x103/0x610 [ 2001.388333] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2001.388352] RIP: 0033:0x458da9 [ 2001.394576] sd 0:0:1:0: [sg0] tag#443 CDB: opcode=0xe5 (vendor) [ 2001.403007] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2001.403017] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2001.403031] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 2001.403037] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 2001.403044] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2001.403051] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 2001.403058] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 [ 2001.482766] sd 0:0:1:0: [sg0] tag#487 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2001.485697] sd 0:0:1:0: [sg0] tag#443 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2001.485716] sd 0:0:1:0: [sg0] tag#443 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2001.485733] sd 0:0:1:0: [sg0] tag#443 CDB[20]: a0 [ 2001.512232] sd 0:0:1:0: [sg0] tag#487 CDB: opcode=0xe5 (vendor) 17:16:28 executing program 2 (fault-call:3 fault-nth:52): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x700, 0x0, 0x0}) 17:16:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x70, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x1, 0x0) sendto$llc(r1, &(0x7f0000000380)="7a0e35d31342929e2617bc8cb5c3f936bf52ab6dd77178b6124fed69052dea32068c70470d2bdd53efcaa792dc6b736f3012bd3c387a109d99b0830edbbac817d8accc7d95c9328595473fc25509bff55ad4ea55e7e7662d0fd250e733006e0704d07e2e0629845de5fa13b938294a523a097f8d7f63eca34c82b53a47b7e37d8838665332488fdb0cf43f1d04bcd7ef91bc7ecea7c4d5992ea575302171908f42cc98f9f22a8303def1706c77c190bbfb459c7b33", 0xb5, 0x4000000, &(0x7f00000002c0)={0x1a, 0x30f, 0x1, 0xd7aa, 0x9, 0x1, @remote}, 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000005c0)='Ls\xb5\asK&/proc/s\xd4\xb4a\x199rs\xfds\x00nc_r+(\x1c\xbbsh_period\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9e\x00\x00\x00\x00\x00\x8cR)\x99\xf6a\x15g\xac\x8f\xc9\x13}\xd6\x95(\x82\xc5\xdb\x9f\x00\x00\x00\x00\x00\x00\x00\x10D\xff-\xdd\xc6\x88\xb3~\xf0\xba\xbe\x8e\xcc24U\xde\x8c\x99\x05Q\x95\xec\aL\xa3\xd2\xca=\xa38\xd8-=\xbe\xac7y\x17\x97\x18\xa7\x8es\xe6\xafI\xec\xee\x1e\x05#\x19\x00\xf3\x87\x1c\xa1-\xdfa', 0x2, 0x0) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000480)='syz0\x00') ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x1000, 0x2, 0xc56, 0x2, 0x8, 0x2, 0x5, 0x400, 0xfff, 0x400, 0x0, 0x7fff, 0xfffffffffffff7a8}, {0xfffffffffffffffa, 0x4, 0x1, 0x9, 0x3, 0xdd98, 0xae67, 0x830, 0x6, 0x4, 0x3, 0x7fffffff, 0x9}, {0x2, 0xfffffffffffffff8, 0x7, 0xd6, 0x3f, 0x10001, 0x1, 0x0, 0xff, 0x5, 0xfffffffffffffffe, 0x8, 0x3}], 0x8}) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000440)={0x87, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x0, 'nq\x00', 0x2, 0xbf, 0x37}, 0x2c) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) connect$rose(r1, &(0x7f0000000500)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000240)={'eql\x00', {0x2, 0x4e20, @multicast1}}) ioctl$SG_IO(r3, 0x2284, &(0x7f0000000300)={0x0, 0x1, 0x1b3, 0xfffffffffffffffc, @scatter={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/169}]}, 0x0, 0x0, 0x200, 0x1, 0x0, 0x0}) ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0x1) write$cgroup_subtree(r2, &(0x7f00000004c0)={[{0x2f, 'pids'}, {0x2f, 'cpu'}, {0x0, 'memory'}]}, 0x13) [ 2001.523219] sd 0:0:1:0: [sg0] tag#487 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2001.523237] sd 0:0:1:0: [sg0] tag#487 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2001.523252] sd 0:0:1:0: [sg0] tag#487 CDB[20]: a0 17:16:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x300000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2001.576984] sd 0:0:1:0: [sg0] tag#469 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2001.586140] sd 0:0:1:0: [sg0] tag#469 CDB: opcode=0xe5 (vendor) [ 2001.592339] sd 0:0:1:0: [sg0] tag#469 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2001.601216] sd 0:0:1:0: [sg0] tag#469 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2001.610019] sd 0:0:1:0: [sg0] tag#469 CDB[20]: a0 17:16:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x6, 0x2000) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x40, 0x0) read$FUSE(r0, &(0x7f0000000640), 0x1000) ioctl$SG_IO(r2, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_GET_CHILD_SUBREAPER(0x25) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000180)=0x7, 0x4) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x2a4, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x73d}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb366}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x13c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xfff, @mcast2, 0x10000}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x577}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf76}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb2f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @rand_addr="acffdde8c8ec8d6d528a67b839f9af55", 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffff80}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffffef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x62}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x140}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x97}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'bond_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x56}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x800}, 0x44) [ 2001.649494] sd 0:0:1:0: [sg0] tag#478 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2001.658429] sd 0:0:1:0: [sg0] tag#478 CDB: opcode=0xe5 (vendor) [ 2001.664617] sd 0:0:1:0: [sg0] tag#478 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2001.673491] sd 0:0:1:0: [sg0] tag#478 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2001.679868] sd 0:0:1:0: [sg0] tag#491 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2001.682372] sd 0:0:1:0: [sg0] tag#478 CDB[20]: a0 [ 2001.696104] sd 0:0:1:0: [sg0] tag#491 CDB: opcode=0xe5 (vendor) [ 2001.702321] sd 0:0:1:0: [sg0] tag#491 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2001.711181] sd 0:0:1:0: [sg0] tag#491 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2001.721311] sd 0:0:1:0: [sg0] tag#491 CDB[20]: a0 [ 2001.735535] FAULT_INJECTION: forcing a failure. [ 2001.735535] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2001.777312] CPU: 0 PID: 7466 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 2001.784266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2001.793663] Call Trace: [ 2001.796307] dump_stack+0x172/0x1f0 [ 2001.799993] should_fail.cold+0xa/0x1b [ 2001.804011] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2001.809149] ? ___might_sleep+0x163/0x280 [ 2001.813338] ? __might_sleep+0x95/0x190 [ 2001.817359] __alloc_pages_nodemask+0x1ee/0x760 17:16:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x400000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2001.823206] ? check_preemption_disabled+0x48/0x290 [ 2001.828444] ? __alloc_pages_slowpath+0x2870/0x2870 [ 2001.833512] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2001.839092] alloc_pages_current+0x107/0x210 [ 2001.843549] get_zeroed_page+0x14/0x50 [ 2001.847471] mon_alloc_buff+0xc2/0x190 [ 2001.851391] ? mon_bin_ioctl+0x48e/0xc80 [ 2001.855483] mon_bin_ioctl+0x4ad/0xc80 [ 2001.859404] ? mon_bin_get_event+0x450/0x450 [ 2001.863843] ? __fget+0x340/0x540 [ 2001.867335] ? ___might_sleep+0x163/0x280 [ 2001.871522] ? __might_sleep+0x95/0x190 17:16:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xfffffffffffffffe, 0x2) exit(0x0) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x7, 0x400) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000700)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000800)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000880)=0x14) accept(r0, &(0x7f0000000940)=@hci={0x1f, 0x0}, &(0x7f00000009c0)=0x80) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000bc0)={&(0x7f00000000c0), 0xc, &(0x7f0000000b80)={&(0x7f0000000a00)={0x164, r3, 0x102, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x148, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r6}}}]}}]}, 0x164}, 0x1, 0x0, 0x0, 0x40}, 0x4010) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2001.875531] ? mon_bin_get_event+0x450/0x450 [ 2001.879983] do_vfs_ioctl+0xd6e/0x1390 [ 2001.883905] ? selinux_file_ioctl+0x46f/0x5e0 [ 2001.888432] ? selinux_file_ioctl+0x125/0x5e0 [ 2001.892960] ? ioctl_preallocate+0x210/0x210 [ 2001.897396] ? selinux_file_mprotect+0x620/0x620 [ 2001.902196] ? iterate_fd+0x360/0x360 [ 2001.906031] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2001.911867] ? fput+0x128/0x1a0 [ 2001.915179] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2001.915200] ? security_file_ioctl+0x93/0xc0 [ 2001.915225] ksys_ioctl+0xab/0xd0 [ 2001.925223] __x64_sys_ioctl+0x73/0xb0 [ 2001.932605] do_syscall_64+0x103/0x610 [ 2001.936523] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2001.941739] RIP: 0033:0x458da9 [ 2001.944952] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2001.963969] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2001.971721] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 2001.974642] sd 0:0:1:0: [sg0] tag#478 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2001.979015] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 2001.979026] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2001.979034] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 2001.979042] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 [ 2001.987800] sd 0:0:1:0: [sg0] tag#478 CDB: opcode=0xe5 (vendor) 17:16:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x74, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x1f00, 0x0, 0x0}) [ 2002.017281] sd 0:0:1:0: [sg0] tag#478 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2002.032275] sd 0:0:1:0: [sg0] tag#478 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2002.041151] sd 0:0:1:0: [sg0] tag#478 CDB[20]: a0 [ 2002.079373] sd 0:0:1:0: [sg0] tag#491 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2002.088442] sd 0:0:1:0: [sg0] tag#491 CDB: opcode=0xe5 (vendor) [ 2002.094667] sd 0:0:1:0: [sg0] tag#491 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2002.101630] sd 0:0:1:0: [sg0] tag#493 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2002.103544] sd 0:0:1:0: [sg0] tag#491 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2002.112264] sd 0:0:1:0: [sg0] tag#493 CDB: opcode=0xe5 (vendor) 17:16:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x8002, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {}, {}]}) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) [ 2002.121070] sd 0:0:1:0: [sg0] tag#491 CDB[20]: a0 [ 2002.127156] sd 0:0:1:0: [sg0] tag#493 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2002.127175] sd 0:0:1:0: [sg0] tag#493 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2002.127196] sd 0:0:1:0: [sg0] tag#493 CDB[20]: a0 17:16:29 executing program 5: r0 = perf_event_open$cgroup(&(0x7f0000000140)={0x4, 0x70, 0x3, 0x5, 0x800, 0x4, 0x0, 0x100000, 0x40, 0x8, 0x20000000000, 0x8, 0x9, 0x5, 0x1000, 0x80, 0x8001, 0x4, 0x6, 0xfffffffffffffc00, 0x8000, 0x1000, 0x1, 0x100000000, 0x6, 0x77bb, 0x2, 0x6600, 0x6, 0x1, 0x1, 0x2, 0x1, 0x2, 0x6, 0x1, 0x3, 0x1, 0x0, 0x8001, 0x0, @perf_bp={&(0x7f0000000100), 0x5}, 0x20000, 0x20000, 0xc1, 0xc, 0x2, 0x5, 0x7fff}, 0xffffffffffffff9c, 0xa, 0xffffffffffffff9c, 0x8) pread64(r0, &(0x7f0000000240)=""/192, 0xc0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0xffffffffffffffff, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:29 executing program 2 (fault-call:3 fault-nth:53): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x7a, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x500000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x15e8a87d, &(0x7f0000000140)="625901ea4df861b701e47557ade755a93751b5994788cf52eb2f5b9e394c622a3495847db7d4774ab429eb09f2ced9ba2f838193ebfc2d1abee9b0e34b1a23b62b7e2a6a22c5f3442f91009f7a760a78a5773ec4f3fe24b92cf449d6c36feff3b370f852a3d4750f485e84ee56ac5383d6ee") ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x54) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000100)={'lapb0\x00', {0x2, 0x4e20, @multicast2}}) r2 = dup3(r1, r1, 0x80000) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x2) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/create\x00', 0x2, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2002.299409] sd 0:0:1:0: [sg0] tag#508 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2002.308810] sd 0:0:1:0: [sg0] tag#508 CDB: opcode=0xe5 (vendor) [ 2002.315034] sd 0:0:1:0: [sg0] tag#508 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2002.323906] sd 0:0:1:0: [sg0] tag#508 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2002.332836] sd 0:0:1:0: [sg0] tag#508 CDB[20]: a0 17:16:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x2000, 0x0, 0x0}) [ 2002.409993] FAULT_INJECTION: forcing a failure. [ 2002.409993] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2002.434598] sd 0:0:1:0: [sg0] tag#508 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2002.443413] sd 0:0:1:0: [sg0] tag#508 CDB: opcode=0xe5 (vendor) [ 2002.449543] sd 0:0:1:0: [sg0] tag#508 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 17:16:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) write$tun(r1, &(0x7f00000003c0)={@val, @void, @eth={@remote, @local, [], {@x25={0x805, {0x1, 0x0, 0x0, "4740b58ee996c24871bb7903a00d71b9ee7e1a5c2ace22b1f29c96a7086b3c6572d4a80a3d694b19f4727a1e0be5f9b90acd67edc153bf0ebb36da5292a3ca9045be7b5da9bbcdeefa36fd7f0df597b9fd318e94e6eda6206d98765c3dd59ad4ca64794a3ad7bdf0bab52dec022d7f10c01b5c7a9f72365b9f259b9bbcae8a0ff931003d065e9a11d3752aed70748ad93f7ee79cc7ca82ea6fed204f47231f02a49338f278e3dc762d60e2559a02bd"}}}}}, 0xc4) r2 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x80000000, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f00000001c0)={0x2, 0x0, [0x0, 0x0]}) ioctl$SG_IO(r2, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x280000, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.origin\x00', &(0x7f0000000380)='y\x00', 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2f, 0x3, 0x0, {0x0, 0xe, 0x0, '/dev/snapshot\x00'}}, 0x2f) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000180)=r1) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, &(0x7f0000000100)={r4, &(0x7f00000004c0)=""/237}) [ 2002.458457] sd 0:0:1:0: [sg0] tag#508 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2002.467472] sd 0:0:1:0: [sg0] tag#508 CDB[20]: a0 17:16:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4800, 0x0, 0x0}) [ 2002.512613] CPU: 0 PID: 7514 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 2002.519540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2002.528929] Call Trace: [ 2002.531554] dump_stack+0x172/0x1f0 [ 2002.535229] should_fail.cold+0xa/0x1b [ 2002.540035] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2002.545184] ? ___might_sleep+0x163/0x280 [ 2002.549372] ? __might_sleep+0x95/0x190 [ 2002.553387] __alloc_pages_nodemask+0x1ee/0x760 [ 2002.558095] ? check_preemption_disabled+0x48/0x290 17:16:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4c00, 0x0, 0x0}) [ 2002.563196] ? __alloc_pages_slowpath+0x2870/0x2870 [ 2002.568281] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2002.573882] alloc_pages_current+0x107/0x210 [ 2002.578344] get_zeroed_page+0x14/0x50 [ 2002.582273] mon_alloc_buff+0xc2/0x190 [ 2002.586478] ? mon_bin_ioctl+0x48e/0xc80 [ 2002.590577] mon_bin_ioctl+0x4ad/0xc80 [ 2002.594513] ? mon_bin_get_event+0x450/0x450 [ 2002.598950] ? __fget+0x340/0x540 [ 2002.602439] ? ___might_sleep+0x163/0x280 [ 2002.606627] ? __might_sleep+0x95/0x190 [ 2002.610684] ? mon_bin_get_event+0x450/0x450 [ 2002.615148] do_vfs_ioctl+0xd6e/0x1390 [ 2002.619079] ? selinux_file_ioctl+0x46f/0x5e0 [ 2002.623608] ? selinux_file_ioctl+0x125/0x5e0 [ 2002.628143] ? ioctl_preallocate+0x210/0x210 [ 2002.632577] ? selinux_file_mprotect+0x620/0x620 [ 2002.637366] ? iterate_fd+0x360/0x360 [ 2002.641192] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2002.646766] ? fput+0x128/0x1a0 [ 2002.650076] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2002.655649] ? security_file_ioctl+0x93/0xc0 [ 2002.660092] ksys_ioctl+0xab/0xd0 [ 2002.663593] __x64_sys_ioctl+0x73/0xb0 [ 2002.667510] do_syscall_64+0x103/0x610 [ 2002.671627] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2002.676845] RIP: 0033:0x458da9 [ 2002.680072] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2002.699088] RSP: 002b:00007f9a65db4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:16:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0xac, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000100)=0x4fe4d313, 0x4) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000140)={{0x81, 0x5}, {0x4, 0x7fffffff}, 0x5, 0x0, 0xcdb}) connect$netrom(r2, &(0x7f0000000080)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2002.706832] RAX: ffffffffffffffda RBX: 00007f9a65db4c90 RCX: 0000000000458da9 [ 2002.714241] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000003 [ 2002.721527] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2002.728818] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65db56d4 [ 2002.736118] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000004 17:16:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000040)={0x53, 0xffffffffffffffff, 0x75, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x300, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:30 executing program 2 (fault-call:3 fault-nth:54): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:30 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x6000, 0x0, 0x0}) 17:16:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x600000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x500, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndpcmp(&(0x7f0000000380)='/dev/snd/pcmC#D#p\x00', 0xffffffffffffc5f5, 0x8000) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x1) ioctl(r0, 0x3ed0b63, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x80000301000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @broadcast}}}, &(0x7f00000001c0)=0x36b) accept4$tipc(r1, &(0x7f0000000240)=@name, &(0x7f00000002c0)=0x10, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={r3, 0x78}, &(0x7f0000000280)=0x8) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000080)={0x7, 0x20}) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0x5, 0x0, 0x10000, 0x7, 0x0, 0x6, 0x7, 0x1, 0x0, 0x7017, 0x3f000000000000, 0x7}) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2003.108909] FAULT_INJECTION: forcing a failure. [ 2003.108909] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2003.128995] CPU: 0 PID: 7574 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 2003.135931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2003.145418] Call Trace: [ 2003.148044] dump_stack+0x172/0x1f0 [ 2003.151712] should_fail.cold+0xa/0x1b [ 2003.155640] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2003.160807] ? ___might_sleep+0x163/0x280 [ 2003.164988] ? __might_sleep+0x95/0x190 [ 2003.168994] __alloc_pages_nodemask+0x1ee/0x760 [ 2003.173720] ? check_preemption_disabled+0x48/0x290 [ 2003.178802] ? __alloc_pages_slowpath+0x2870/0x2870 [ 2003.183871] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2003.189449] alloc_pages_current+0x107/0x210 [ 2003.193894] get_zeroed_page+0x14/0x50 [ 2003.197807] mon_alloc_buff+0xc2/0x190 [ 2003.201727] ? mon_bin_ioctl+0x48e/0xc80 [ 2003.205848] mon_bin_ioctl+0x4ad/0xc80 [ 2003.209752] ? mon_bin_get_event+0x450/0x450 [ 2003.214265] ? __fget+0x340/0x540 [ 2003.217725] ? ___might_sleep+0x163/0x280 [ 2003.221905] ? __might_sleep+0x95/0x190 [ 2003.225902] ? mon_bin_get_event+0x450/0x450 [ 2003.230443] do_vfs_ioctl+0xd6e/0x1390 [ 2003.234338] ? selinux_file_ioctl+0x46f/0x5e0 [ 2003.238830] ? selinux_file_ioctl+0x125/0x5e0 [ 2003.243347] ? ioctl_preallocate+0x210/0x210 [ 2003.247770] ? selinux_file_mprotect+0x620/0x620 [ 2003.252531] ? iterate_fd+0x360/0x360 [ 2003.256344] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2003.261901] ? fput+0x128/0x1a0 [ 2003.265212] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2003.270798] ? security_file_ioctl+0x93/0xc0 [ 2003.275231] ksys_ioctl+0xab/0xd0 [ 2003.278696] __x64_sys_ioctl+0x73/0xb0 [ 2003.282603] do_syscall_64+0x103/0x610 [ 2003.286522] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2003.291734] RIP: 0033:0x458da9 17:16:30 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x6277, 0x408000) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$FICLONE(r1, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adcea123c123f319bd070a0e3b9a6bc58085234ab") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) truncate(&(0x7f0000000000)='./file0\x00', 0x9) 17:16:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x600, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x6800, 0x0, 0x0}) 17:16:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x700000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2003.294924] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2003.313830] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2003.321558] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 2003.328841] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 2003.336111] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2003.343569] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 2003.350854] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:30 executing program 2 (fault-call:3 fault-nth:55): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x700, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x800000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x6c00, 0x0, 0x0}) 17:16:30 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80000, 0x0) write$P9_RWSTAT(r0, &(0x7f0000000080)={0x7, 0x7f, 0x2}, 0x7) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000180)={0x0, 0x100000000000, 0x3, &(0x7f0000000140)=0xff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000100)=0x9, 0x4) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xfd, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f0100000000000000") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x48c00, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f00000002c0)=0x1, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00>%x\x90\x1b\\%j\\!:\xe7\xf6\xf7\xbd`r;\xd6F\x00v\xae$\x19\xffb\xc3\xa57\xc3\x90\x86\xdb\xe3\x1d\x98$\x8d\xc1P\xbf\t\\\x8eW\x16\x84!\xa0\xae\x9e\x18\x9f\xd6?e\xa9\xc5\xc2B\x0e\xfa\xa1\xd2\x87i\xcf\xa7\xe0\x9ajF\x80\xda\xac3\xe3\xe9R\xf8\xb0^1\xf6+\x13\xf2\x1e\x9a\xdf\xdd\xaf\xf7\xe8\xa9\xb6\xf3\xe7!\xcd\xe8\x02J\xf1\xf3\xa8\xc4\xdbX\xebLC\x06\xab\xdf`\xdb>\xb4\xd2\x99,X Mhp\xdd \xb5\x18f\xa1~,\x1e[\xe3\x92\xef\xe8Q\r\xbe\x05B\xcd\x8f\x11\xc1EkQZ\xf0\xed[F\x85\x9b\xdbM \x9e\xa3\x1fX\x806Q\x19]\xc4r\xc8t9\x90\xc3\xe5A\x1cb\x99\xd5\b\xe0\x1d\xa1\xce\x88\x82]\xfb\xf6o\xbfv\xa8\xdc\x81\xe1\x05d\x00\x00\x00\x00\x00\x00\xe3\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xde\x9cx\xb3?\xe4@\xb6.j\x89+\xd7~\xe7=rn\xdb\xe8\x1f\x9b\x9f\xb4\xa3>.[[\x05[o*\xfd5\xf4E\x01\x14\xc9D\xd2\a~?\xc0Y\x8f\x19+\x97\x83I\x7f\x90\xb8d\xe1>W~TZ\x0f\x96+\xcf\xcc\x8fr\xa9\xfc\xe5\x10\xf77\xbb\x96\xc7\r1\x14\xd7\x10+\x83\xfc9\a\xcfu\xff\xbeN\xdec\x1bg\xab\x88\xf6s?\x8d\x8e\xb0\xe0\xfe\x97=\xdc\x04S/\xdai\xcf\x06\xc1e=\xac\xb7&7bL:\xb1\xaa\x81IA\x13\x9c\xee\xb9_\xbd]\xd48B\x16\xdc\xb0\x058rF\x86y\xa5\xb7\x83', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000500)='cpuset.cpu_exclusive\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x400000) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000380)=0x6f3, 0x8) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000080)=0xf6b131e, 0x4) socket$inet_sctp(0x2, 0x0, 0x84) [ 2003.648985] FAULT_INJECTION: forcing a failure. [ 2003.648985] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2003.697658] CPU: 1 PID: 7601 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 2003.704585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2003.715653] Call Trace: [ 2003.718293] dump_stack+0x172/0x1f0 [ 2003.721975] should_fail.cold+0xa/0x1b [ 2003.725911] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2003.731068] ? ___might_sleep+0x163/0x280 [ 2003.735258] ? __might_sleep+0x95/0x190 [ 2003.739370] __alloc_pages_nodemask+0x1ee/0x760 [ 2003.744075] ? fs_reclaim_acquire+0x20/0x20 [ 2003.748425] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2003.753995] ? __alloc_pages_slowpath+0x2870/0x2870 [ 2003.759060] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2003.764638] alloc_pages_current+0x107/0x210 [ 2003.769089] get_zeroed_page+0x14/0x50 [ 2003.773004] mon_alloc_buff+0xc2/0x190 [ 2003.773018] ? mon_bin_ioctl+0x48e/0xc80 [ 2003.773034] mon_bin_ioctl+0x4ad/0xc80 [ 2003.773055] ? mon_bin_get_event+0x450/0x450 [ 2003.789417] ? __fget+0x340/0x540 [ 2003.789439] ? ___might_sleep+0x163/0x280 [ 2003.789457] ? __might_sleep+0x95/0x190 [ 2003.801073] ? mon_bin_get_event+0x450/0x450 [ 2003.805528] do_vfs_ioctl+0xd6e/0x1390 [ 2003.809453] ? selinux_file_ioctl+0x46f/0x5e0 [ 2003.813995] ? selinux_file_ioctl+0x125/0x5e0 [ 2003.818544] ? ioctl_preallocate+0x210/0x210 [ 2003.818562] ? selinux_file_mprotect+0x620/0x620 [ 2003.818586] ? iterate_fd+0x360/0x360 [ 2003.832531] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2003.838110] ? fput+0x128/0x1a0 [ 2003.841444] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 17:16:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x1f00000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x7000, 0x0, 0x0}) 17:16:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x1f00, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2003.847013] ? security_file_ioctl+0x93/0xc0 [ 2003.847037] ksys_ioctl+0xab/0xd0 [ 2003.854930] __x64_sys_ioctl+0x73/0xb0 [ 2003.858857] do_syscall_64+0x103/0x610 [ 2003.862783] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2003.867992] RIP: 0033:0x458da9 [ 2003.871209] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2003.871218] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:16:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x2000000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2003.871235] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 2003.871244] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 2003.871252] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2003.871259] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 2003.871267] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x7400, 0x0, 0x0}) 17:16:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x2000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:31 executing program 2 (fault-call:3 fault-nth:56): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup3(r0, r0, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x40000, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000380)={{0x8, 0x3, 0x6, 0x8, 'syz1\x00', 0x400}, 0x6, 0x3, 0x8, r3, 0x4, 0x9, 'syz1\x00', &(0x7f00000000c0)=['/dev/sg#\x00', '/dev/sg#\x00', '\x00', 'vmnet0+\x00'], 0x1b, [], [0x0, 0x4, 0x1, 0x9]}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r4 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r4, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x14000, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000080)) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2004.063717] FAULT_INJECTION: forcing a failure. [ 2004.063717] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2004.120912] CPU: 1 PID: 7641 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 2004.127862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2004.137263] Call Trace: [ 2004.137295] dump_stack+0x172/0x1f0 [ 2004.137334] should_fail.cold+0xa/0x1b [ 2004.137358] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2004.137382] ? ___might_sleep+0x163/0x280 [ 2004.156857] ? __might_sleep+0x95/0x190 [ 2004.160858] __alloc_pages_nodemask+0x1ee/0x760 [ 2004.160880] ? check_preemption_disabled+0x48/0x290 [ 2004.160900] ? __alloc_pages_slowpath+0x2870/0x2870 [ 2004.160927] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2004.160947] alloc_pages_current+0x107/0x210 [ 2004.160969] get_zeroed_page+0x14/0x50 [ 2004.175696] mon_alloc_buff+0xc2/0x190 [ 2004.193483] ? mon_bin_ioctl+0x48e/0xc80 [ 2004.197574] mon_bin_ioctl+0x4ad/0xc80 [ 2004.201484] ? mon_bin_get_event+0x450/0x450 [ 2004.201503] ? __fget+0x340/0x540 [ 2004.201523] ? ___might_sleep+0x163/0x280 [ 2004.201540] ? __might_sleep+0x95/0x190 17:16:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x6000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={0x0, r1, 0xe, 0x2}, 0xffffff0e) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f00000000c0)=0x8) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2004.201553] ? mon_bin_get_event+0x450/0x450 [ 2004.201572] do_vfs_ioctl+0xd6e/0x1390 [ 2004.201593] ? selinux_file_ioctl+0x46f/0x5e0 [ 2004.217598] ? selinux_file_ioctl+0x125/0x5e0 [ 2004.230410] ? ioctl_preallocate+0x210/0x210 [ 2004.230429] ? selinux_file_mprotect+0x620/0x620 [ 2004.230455] ? iterate_fd+0x360/0x360 [ 2004.230477] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2004.230497] ? fput+0x128/0x1a0 [ 2004.239435] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2004.239456] ? security_file_ioctl+0x93/0xc0 [ 2004.239478] ksys_ioctl+0xab/0xd0 17:16:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x7a00, 0x0, 0x0}) [ 2004.239499] __x64_sys_ioctl+0x73/0xb0 [ 2004.239521] do_syscall_64+0x103/0x610 [ 2004.248115] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2004.248129] RIP: 0033:0x458da9 [ 2004.248147] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2004.248156] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2004.248171] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 17:16:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x4800000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xe, 0xffffffffffffffff) r2 = fcntl$dupfd(r0, 0x406, r1) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040)=0x1, 0x4) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x3f00, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:31 executing program 2 (fault-call:3 fault-nth:57): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) [ 2004.248180] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 2004.248197] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2004.257030] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 2004.257038] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0xfc00, 0x0, 0x0}) 17:16:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x4400) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x1000005) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000180)) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, [], 0x2b}, 0x4}}, [0x2, 0x1, 0x100, 0x1, 0x401, 0x3, 0x2, 0x3, 0xffffffffffff7fff, 0x6, 0x1, 0x100, 0x8, 0xdd46169, 0x1fc0000000000]}, &(0x7f0000000140)=0x100) ioctl$UI_DEV_CREATE(r1, 0x5501) recvmsg$kcm(r1, &(0x7f00000007c0)={&(0x7f0000000480)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000500)=""/206, 0xce}, {&(0x7f00000002c0)=""/40, 0x28}, {&(0x7f0000000600)}, {&(0x7f0000000640)=""/51, 0x33}], 0x4, &(0x7f00000006c0)=""/224, 0xe0}, 0x3aeb30c2cc0672f1) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r3, 0x13d}, 0x8) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x1ff, 0x1, 0x4, 0x80, 0x5}, 0xc) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x2, 0x2040) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{}, {}, {}, {}, {}]}) 17:16:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x800, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f00000000c0)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dsp\x00', 0x24000, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f00000006c0)={0x2, 0x22}, 0x2) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000240)=""/63) ioctl$SG_IO(r3, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={0x0, r3, 0xb, 0x1}, 0x14) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000600)={{&(0x7f00000004c0)=""/204, 0xcc}, &(0x7f00000005c0), 0x4}, 0x20) sendmsg$nl_netfilter(r4, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb0, 0x4, 0xb, 0x320, 0x70bd2a, 0x25dfdbfc, {0x3, 0x0, 0x6}, [@generic="93d47c435d9981686bcc47acca7cd7f41451da685598b8276ed45301f8c4f24d7e9e3b5268f2211f80", @nested={0x30, 0x71, [@generic="bba542f45411384b7e15b345baaf6126f6bbb48cfa4826b0d75338216ba2e094917a59333f14e99c1e"]}, @generic="1c2285f0c3c1a0b5fabec60f536e12ca77b60cfacd8bb7305534370dfe3632ebe188be6f100452fff7fcaaf1c3c0513d9543e9", @typed={0x10, 0x4a, @str='/dev/sg#\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2004.472457] FAULT_INJECTION: forcing a failure. [ 2004.472457] name fail_page_alloc, interval 1, probability 0, space 0, times 0 17:16:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x4c00000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x4800, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2004.605415] CPU: 0 PID: 7667 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 2004.612345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2004.621731] Call Trace: [ 2004.624357] dump_stack+0x172/0x1f0 [ 2004.628021] should_fail.cold+0xa/0x1b [ 2004.631947] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2004.637076] ? ___might_sleep+0x163/0x280 [ 2004.641258] ? __might_sleep+0x95/0x190 [ 2004.645263] __alloc_pages_nodemask+0x1ee/0x760 [ 2004.649975] ? check_preemption_disabled+0x48/0x290 [ 2004.655021] ? __alloc_pages_slowpath+0x2870/0x2870 [ 2004.660078] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2004.665657] alloc_pages_current+0x107/0x210 [ 2004.670371] get_zeroed_page+0x14/0x50 [ 2004.674287] mon_alloc_buff+0xc2/0x190 [ 2004.678209] ? mon_bin_ioctl+0x48e/0xc80 [ 2004.682307] mon_bin_ioctl+0x4ad/0xc80 [ 2004.686221] ? mon_bin_get_event+0x450/0x450 [ 2004.690667] ? __fget+0x340/0x540 [ 2004.694153] ? ___might_sleep+0x163/0x280 [ 2004.699018] ? __might_sleep+0x95/0x190 17:16:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x4c00, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x200000, 0x0, 0x0}) [ 2004.703031] ? mon_bin_get_event+0x450/0x450 [ 2004.707474] do_vfs_ioctl+0xd6e/0x1390 [ 2004.711396] ? selinux_file_ioctl+0x46f/0x5e0 [ 2004.715920] ? selinux_file_ioctl+0x125/0x5e0 [ 2004.720447] ? ioctl_preallocate+0x210/0x210 [ 2004.724891] ? selinux_file_mprotect+0x620/0x620 [ 2004.729680] ? iterate_fd+0x360/0x360 [ 2004.733526] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2004.739180] ? fput+0x128/0x1a0 [ 2004.742590] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2004.748347] ? security_file_ioctl+0x93/0xc0 [ 2004.752792] ksys_ioctl+0xab/0xd0 [ 2004.756280] __x64_sys_ioctl+0x73/0xb0 [ 2004.760228] do_syscall_64+0x103/0x610 [ 2004.760257] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2004.769367] RIP: 0033:0x458da9 [ 2004.772582] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2004.791512] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2004.799259] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 2004.806572] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 2004.813871] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2004.821174] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 2004.828474] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x6800, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x5d00000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xffff, 0x40000) sendmsg$nl_crypto(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@getstat={0xe0, 0x15, 0x300, 0x70bd2c, 0x25dfdbff, {{'generic-gcm-aesni\x00'}, [], [], 0x2000}, ["", "", "", "", "", "", ""]}, 0xe0}}, 0x24000044) 17:16:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) accept4$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @reserved}, 0x10, 0x800) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x1004000, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r3, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:32 executing program 2 (fault-call:3 fault-nth:58): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x1000000, 0x0, 0x0}) 17:16:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x6c00, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:32 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x8}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000002c0)={r1, 0x1000}, 0x8) r2 = socket$key(0xf, 0x3, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f00000000c0)=""/227, &(0x7f0000000000)=0xe3) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x100, &(0x7f0000000380)="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") r4 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r4, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8, 0xff}) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000004c0)={0x16a, 0x0, 0x3, 0x2}, 0x10) 17:16:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x6000000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0xfffffffffffffffc) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2005.155184] FAULT_INJECTION: forcing a failure. [ 2005.155184] name fail_page_alloc, interval 1, probability 0, space 0, times 0 17:16:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x2000000, 0x0, 0x0}) 17:16:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="cc0107020d030000ac02000013810000210100003704000000000000000000009352248a13e343b1e1dda8d2c7c8cc41a826b927620e2289918a2ae9d1764b30cf91373bec15a8cd9e6405a9339554509669dfba7d101f576574d33760690d6eb80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/2145], 0x861) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x3, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2005.219534] CPU: 0 PID: 7728 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 2005.226462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2005.235954] Call Trace: [ 2005.238579] dump_stack+0x172/0x1f0 [ 2005.242246] should_fail.cold+0xa/0x1b [ 2005.246168] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2005.251305] ? ___might_sleep+0x163/0x280 [ 2005.251325] ? __might_sleep+0x95/0x190 [ 2005.251343] __alloc_pages_nodemask+0x1ee/0x760 [ 2005.251361] ? check_preemption_disabled+0x48/0x290 [ 2005.251379] ? __alloc_pages_slowpath+0x2870/0x2870 [ 2005.251407] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2005.259557] alloc_pages_current+0x107/0x210 [ 2005.284363] get_zeroed_page+0x14/0x50 [ 2005.288292] mon_alloc_buff+0xc2/0x190 [ 2005.292219] ? mon_bin_ioctl+0x48e/0xc80 [ 2005.296316] mon_bin_ioctl+0x4ad/0xc80 [ 2005.300233] ? mon_bin_get_event+0x450/0x450 [ 2005.304682] ? __fget+0x340/0x540 [ 2005.308165] ? ___might_sleep+0x163/0x280 [ 2005.312357] ? __might_sleep+0x95/0x190 17:16:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x3000000, 0x0, 0x0}) [ 2005.316359] ? mon_bin_get_event+0x450/0x450 [ 2005.320812] do_vfs_ioctl+0xd6e/0x1390 [ 2005.324726] ? selinux_file_ioctl+0x46f/0x5e0 [ 2005.329348] ? selinux_file_ioctl+0x125/0x5e0 [ 2005.333878] ? ioctl_preallocate+0x210/0x210 [ 2005.338394] ? selinux_file_mprotect+0x620/0x620 [ 2005.343191] ? iterate_fd+0x360/0x360 [ 2005.347026] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2005.352596] ? fput+0x128/0x1a0 [ 2005.355915] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2005.361491] ? security_file_ioctl+0x93/0xc0 [ 2005.366020] ksys_ioctl+0xab/0xd0 [ 2005.369501] __x64_sys_ioctl+0x73/0xb0 [ 2005.373416] do_syscall_64+0x103/0x610 [ 2005.377342] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2005.382559] RIP: 0033:0x458da9 [ 2005.385766] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2005.404783] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2005.404801] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 17:16:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x7000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2005.404809] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 2005.404816] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2005.404824] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 2005.404831] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x6800000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4000000, 0x0, 0x0}) 17:16:32 executing program 2 (fault-call:3 fault-nth:59): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x7400, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7, 0x580) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) setsockopt$inet_dccp_buf(r1, 0x21, 0x8c, &(0x7f0000000240)="b8eb2f1e890f768cb697c024b84405b0c4c7fd526564bf88120158518b2bdd82870a7e94bc6a6b6a67c049580ef6388ae6fa095573247205822e96110685c3600801ba3e1c39c47313df881a8c89c800dd022b784636f11625132877f7efb32e9965b46f0f48f6af4c509b4522dbb6f357b4c110e3ff19ed3204001a22eebc9171e487425d64c964c3ad91e87bec03f61335c32160efb68f1a4f586a274355f2", 0xa0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000380)={{0x1ff, 0x10001}, 'port0\x00', 0x20, 0x402, 0x70, 0x5, 0x7, 0x9, 0x5, 0x0, 0x1, 0x4}) ioctl$SG_SCSI_RESET(r3, 0x2284, 0x0) ioctl$SG_IO(r3, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x6c00000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x5000000, 0x0, 0x0}) 17:16:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x7a00, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2005.762859] FAULT_INJECTION: forcing a failure. [ 2005.762859] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2005.818293] CPU: 1 PID: 7771 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 2005.826719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2005.836103] Call Trace: [ 2005.838733] dump_stack+0x172/0x1f0 [ 2005.842415] should_fail.cold+0xa/0x1b [ 2005.846368] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2005.851505] ? ___might_sleep+0x163/0x280 [ 2005.855690] ? __might_sleep+0x95/0x190 [ 2005.859700] __alloc_pages_nodemask+0x1ee/0x760 17:16:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/191, 0xbf}, {&(0x7f0000000100)=""/68, 0x44}, {&(0x7f0000000180)=""/67, 0x43}, {&(0x7f0000000240)=""/116, 0x74}], 0x4, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2005.864399] ? check_preemption_disabled+0x48/0x290 [ 2005.869451] ? __alloc_pages_slowpath+0x2870/0x2870 [ 2005.874524] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2005.880099] alloc_pages_current+0x107/0x210 [ 2005.884549] get_zeroed_page+0x14/0x50 [ 2005.888464] mon_alloc_buff+0xc2/0x190 [ 2005.892384] ? mon_bin_ioctl+0x48e/0xc80 [ 2005.896476] mon_bin_ioctl+0x4ad/0xc80 [ 2005.900403] ? mon_bin_get_event+0x450/0x450 [ 2005.904845] ? __fget+0x340/0x540 [ 2005.908359] ? ___might_sleep+0x163/0x280 [ 2005.912556] ? __might_sleep+0x95/0x190 17:16:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0xac00, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2005.916567] ? mon_bin_get_event+0x450/0x450 [ 2005.921024] do_vfs_ioctl+0xd6e/0x1390 [ 2005.925128] ? selinux_file_ioctl+0x46f/0x5e0 [ 2005.929664] ? selinux_file_ioctl+0x125/0x5e0 [ 2005.934211] ? ioctl_preallocate+0x210/0x210 [ 2005.938657] ? selinux_file_mprotect+0x620/0x620 [ 2005.943453] ? iterate_fd+0x360/0x360 [ 2005.947315] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2005.952887] ? fput+0x128/0x1a0 [ 2005.956215] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2005.961808] ? security_file_ioctl+0x93/0xc0 17:16:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x200000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2005.966266] ksys_ioctl+0xab/0xd0 [ 2005.969774] __x64_sys_ioctl+0x73/0xb0 [ 2005.973704] do_syscall_64+0x103/0x610 [ 2005.977629] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2005.982860] RIP: 0033:0x458da9 [ 2005.986103] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2006.005131] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:16:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="6527fde1919fedd2e0e941319bd07000000000000000e1ff") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) getsockopt$sock_int(r0, 0x1, 0x3d, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x208400, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x80000000, 0x4, [0x81, 0x791, 0xa4, 0x34e]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f00000001c0)={r3, 0x12}, 0x8) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x34c, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x49f4, 0x0, 0x1, 0x0}) tee(r0, r1, 0x4, 0xa) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x100, 0x0) ioctl$VIDIOC_DQEVENT(r4, 0x80885659, &(0x7f0000000240)={0x0, @ctrl}) [ 2006.012906] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 2006.020210] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 2006.027624] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2006.034921] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 2006.042422] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:33 executing program 2 (fault-call:3 fault-nth:60): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x6000000, 0x0, 0x0}) 17:16:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000040)=""/79, 0x4f}, {&(0x7f00000000c0)=""/159, 0x9f}, {&(0x7f0000000180)=""/35, 0x23}, {&(0x7f0000000240)=""/117, 0x75}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/185, 0xb9}, {&(0x7f0000000500)=""/69, 0x45}, {&(0x7f00000001c0)=""/42, 0x2a}, {&(0x7f0000000580)=""/223, 0xdf}], 0x9, 0x0) 17:16:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x1000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x7000000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc020000000000a7b20e399bdf04af546ffd000070") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x55fc, 0x180) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000040), 0x4) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f00000000c0)=0x800) 17:16:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x7400000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x2000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:33 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x18000, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}], 0x2, 0xde10, &(0x7f00000000c0)={0x80000000}, 0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0xffff, &(0x7f0000000080)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x7000000, 0x0, 0x0}) [ 2006.375247] FAULT_INJECTION: forcing a failure. [ 2006.375247] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2006.393625] scsi_io_completion_action: 49 callbacks suppressed [ 2006.393660] sd 0:0:1:0: [sg0] tag#553 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2006.397563] sd 0:0:1:0: [sg0] tag#554 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2006.399762] sd 0:0:1:0: [sg0] tag#553 CDB: opcode=0xe5 (vendor) 17:16:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x7a00000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2006.408646] sd 0:0:1:0: [sg0] tag#554 CDB: opcode=0xe5 (vendor) [ 2006.417508] sd 0:0:1:0: [sg0] tag#553 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2006.423679] sd 0:0:1:0: [sg0] tag#554 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2006.429790] sd 0:0:1:0: [sg0] tag#553 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2006.438656] sd 0:0:1:0: [sg0] tag#554 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2006.438674] sd 0:0:1:0: [sg0] tag#554 CDB[20]: a0 [ 2006.447537] sd 0:0:1:0: [sg0] tag#553 CDB[20]: a0 [ 2006.457592] CPU: 1 PID: 7820 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 2006.481770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2006.491139] Call Trace: [ 2006.493763] dump_stack+0x172/0x1f0 [ 2006.497496] should_fail.cold+0xa/0x1b [ 2006.501406] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2006.506517] ? ___might_sleep+0x163/0x280 [ 2006.510683] ? __might_sleep+0x95/0x190 [ 2006.514685] __alloc_pages_nodemask+0x1ee/0x760 [ 2006.519386] ? fs_reclaim_acquire+0x20/0x20 [ 2006.523723] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2006.529276] ? __alloc_pages_slowpath+0x2870/0x2870 [ 2006.534416] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2006.539987] alloc_pages_current+0x107/0x210 [ 2006.544469] get_zeroed_page+0x14/0x50 [ 2006.548458] mon_alloc_buff+0xc2/0x190 [ 2006.552362] ? mon_bin_ioctl+0x48e/0xc80 [ 2006.556448] mon_bin_ioctl+0x4ad/0xc80 [ 2006.560357] ? mon_bin_get_event+0x450/0x450 [ 2006.564802] ? __fget+0x340/0x540 [ 2006.568274] ? ___might_sleep+0x163/0x280 [ 2006.572450] ? __might_sleep+0x95/0x190 [ 2006.576441] ? mon_bin_get_event+0x450/0x450 [ 2006.580868] do_vfs_ioctl+0xd6e/0x1390 [ 2006.584771] ? selinux_file_ioctl+0x46f/0x5e0 [ 2006.589448] ? selinux_file_ioctl+0x125/0x5e0 [ 2006.593968] ? ioctl_preallocate+0x210/0x210 [ 2006.598392] ? selinux_file_mprotect+0x620/0x620 [ 2006.603177] ? iterate_fd+0x360/0x360 [ 2006.607003] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2006.612561] ? fput+0x128/0x1a0 [ 2006.615865] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2006.621426] ? security_file_ioctl+0x93/0xc0 [ 2006.625869] ksys_ioctl+0xab/0xd0 [ 2006.629349] __x64_sys_ioctl+0x73/0xb0 [ 2006.633274] do_syscall_64+0x103/0x610 [ 2006.637197] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2006.642404] RIP: 0033:0x458da9 [ 2006.645644] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2006.664753] RSP: 002b:00007f9a65db4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:16:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x2, 0x100) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0xfffffffc, 0x8001) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f00000000c0)=0x1, 0x4) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2006.672491] RAX: ffffffffffffffda RBX: 00007f9a65db4c90 RCX: 0000000000458da9 [ 2006.679784] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000003 [ 2006.687074] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2006.694378] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65db56d4 [ 2006.701671] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000004 17:16:33 executing program 2 (fault-call:3 fault-nth:61): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x3000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x7d, 0x80000) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0x8) accept$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000440)=0x14) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000480)={r5, @loopback, @local}, 0xc) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000240)={r4, 0x6b, "08714c1817f59d8241f602e7ef72b5ff695488c00b5e1d88fdf145633bce6f534d69c4b48e4ccdeab7131fec53dffb026369ec190abccf8ddae202ec6d625e71be7bf7b6300273642a58d11cd647e0a21f15fe89fd45cc12b71514b8ee2672cdc1ffdddee3f01efc50205c"}, &(0x7f00000002c0)=0x73) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r6 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r6, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x8000) connect$nfc_llcp(r2, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x7, 0x9, 0x7fff, "feb96234a66d06a04d2c55abf4ab5dd09720386af0a46968e3290960aa40e1911847c77a8c2ee9b713be38dd3d9949709b6c42b02e34c2c7d4e870ec15a94f", 0x2b}, 0x60) [ 2006.792125] sd 0:0:1:0: [sg0] tag#566 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2006.801008] sd 0:0:1:0: [sg0] tag#566 CDB: opcode=0xe5 (vendor) [ 2006.807130] sd 0:0:1:0: [sg0] tag#566 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2006.816075] sd 0:0:1:0: [sg0] tag#566 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2006.825062] sd 0:0:1:0: [sg0] tag#566 CDB[20]: a0 17:16:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x8000000, 0x0, 0x0}) [ 2006.882161] sd 0:0:1:0: [sg0] tag#571 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2006.891140] sd 0:0:1:0: [sg0] tag#571 CDB: opcode=0xe5 (vendor) [ 2006.897271] sd 0:0:1:0: [sg0] tag#571 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2006.906196] sd 0:0:1:0: [sg0] tag#571 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2006.915066] sd 0:0:1:0: [sg0] tag#571 CDB[20]: a0 [ 2006.918588] FAULT_INJECTION: forcing a failure. [ 2006.918588] name fail_page_alloc, interval 1, probability 0, space 0, times 0 17:16:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) ioctl$KDSETMODE(r2, 0x4b3a, 0xfffffffffffffc00) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2006.997314] sd 0:0:1:0: [sg0] tag#571 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2007.006523] sd 0:0:1:0: [sg0] tag#571 CDB: opcode=0xe5 (vendor) [ 2007.012713] sd 0:0:1:0: [sg0] tag#571 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2007.018312] CPU: 0 PID: 7855 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 2007.021594] sd 0:0:1:0: [sg0] tag#571 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2007.028362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2007.028377] Call Trace: [ 2007.037391] sd 0:0:1:0: [sg0] tag#571 CDB[20]: a0 [ 2007.046659] dump_stack+0x172/0x1f0 [ 2007.046682] should_fail.cold+0xa/0x1b [ 2007.046706] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2007.046720] ? ___might_sleep+0x163/0x280 [ 2007.046735] ? __might_sleep+0x95/0x190 [ 2007.046752] __alloc_pages_nodemask+0x1ee/0x760 [ 2007.046769] ? check_preemption_disabled+0x48/0x290 [ 2007.046789] ? __alloc_pages_slowpath+0x2870/0x2870 [ 2007.054308] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2007.061829] alloc_pages_current+0x107/0x210 [ 2007.061851] get_zeroed_page+0x14/0x50 [ 2007.061865] mon_alloc_buff+0xc2/0x190 [ 2007.061876] ? mon_bin_ioctl+0x48e/0xc80 [ 2007.061890] mon_bin_ioctl+0x4ad/0xc80 [ 2007.061908] ? mon_bin_get_event+0x450/0x450 [ 2007.061922] ? __fget+0x340/0x540 [ 2007.061939] ? ___might_sleep+0x163/0x280 [ 2007.061954] ? __might_sleep+0x95/0x190 [ 2007.061967] ? mon_bin_get_event+0x450/0x450 [ 2007.061983] do_vfs_ioctl+0xd6e/0x1390 [ 2007.062006] ? selinux_file_ioctl+0x46f/0x5e0 [ 2007.144583] ? selinux_file_ioctl+0x125/0x5e0 [ 2007.149120] ? ioctl_preallocate+0x210/0x210 [ 2007.153554] ? selinux_file_mprotect+0x620/0x620 [ 2007.158353] ? iterate_fd+0x360/0x360 [ 2007.162188] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2007.167928] ? fput+0x128/0x1a0 [ 2007.171245] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2007.176907] ? security_file_ioctl+0x93/0xc0 [ 2007.181345] ksys_ioctl+0xab/0xd0 [ 2007.181365] __x64_sys_ioctl+0x73/0xb0 [ 2007.181383] do_syscall_64+0x103/0x610 [ 2007.181404] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2007.181416] RIP: 0033:0x458da9 [ 2007.181438] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2007.188785] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2007.227723] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 2007.227741] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 17:16:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0xfffffff, 0x0, 0x0}) 17:16:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0)) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in, @in=@empty}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f0000000180)=0xe8) 17:16:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$trusted_overlay_redirect(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='trusted.overlay.redirect\x00', &(0x7f0000000500)='./file0\x00', 0x8, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xf, @scatter={0x1, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/27, 0x1b}]}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/nfsfs\x00') write$UHID_CREATE(r2, &(0x7f0000000300)={0x0, 'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000240)=""/187, 0xbb, 0x8, 0xfffffffffffffffb, 0x2d, 0x4, 0x9}, 0x120) fgetxattr(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='m.\x00\x00\x00\x00\x00\x00'], &(0x7f00000001c0), 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000001c0)={@loopback, @multicast1}, &(0x7f0000000440)=0xc) 17:16:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x4000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0xfeffffff00000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2007.242348] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2007.249646] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 2007.257086] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 [ 2007.313516] sd 0:0:1:0: [sg0] tag#516 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2007.322283] sd 0:0:1:0: [sg0] tag#516 CDB: opcode=0xe5 (vendor) [ 2007.328410] sd 0:0:1:0: [sg0] tag#516 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2007.337372] sd 0:0:1:0: [sg0] tag#516 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2007.346277] sd 0:0:1:0: [sg0] tag#516 CDB[20]: a0 17:16:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x10000000, 0x0, 0x0}) 17:16:34 executing program 3: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)=0x0) ptrace$getregset(0x4204, r0, 0x203, &(0x7f00000001c0)={&(0x7f0000000140)=""/70, 0x46}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x38b3, 0x0) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x4000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x10}) [ 2007.355585] sd 0:0:1:0: [sg0] tag#517 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2007.364519] sd 0:0:1:0: [sg0] tag#517 CDB: opcode=0xe5 (vendor) [ 2007.370638] sd 0:0:1:0: [sg0] tag#517 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2007.379742] sd 0:0:1:0: [sg0] tag#517 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2007.388652] sd 0:0:1:0: [sg0] tag#517 CDB[20]: a0 17:16:34 executing program 2 (fault-call:3 fault-nth:62): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x5000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xfffffffffffffffc, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)=0x0) r4 = getpid() setpgid(r3, r4) [ 2007.448282] sd 0:0:1:0: [sg0] tag#571 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2007.457260] sd 0:0:1:0: [sg0] tag#571 CDB: opcode=0xe5 (vendor) [ 2007.463467] sd 0:0:1:0: [sg0] tag#571 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2007.472365] sd 0:0:1:0: [sg0] tag#571 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2007.481233] sd 0:0:1:0: [sg0] tag#571 CDB[20]: a0 17:16:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0xffffff0f00000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x183, &(0x7f0000000080)="0adc1f123c123f319bd070fbc4621efc42972985c97aa998ffacf7997a692174ce659c5de40e1aec47237c6b5d826f336971466428c3") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xd2f, 0x800) [ 2007.588002] FAULT_INJECTION: forcing a failure. [ 2007.588002] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2007.589711] sd 0:0:1:0: [sg0] tag#571 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2007.609014] sd 0:0:1:0: [sg0] tag#571 CDB: opcode=0xe5 (vendor) [ 2007.615229] sd 0:0:1:0: [sg0] tag#571 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2007.624088] sd 0:0:1:0: [sg0] tag#571 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2007.631612] CPU: 0 PID: 7894 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 2007.632958] sd 0:0:1:0: [sg0] tag#571 CDB[20]: a0 [ 2007.639727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2007.639735] Call Trace: [ 2007.639767] dump_stack+0x172/0x1f0 [ 2007.639794] should_fail.cold+0xa/0x1b [ 2007.664101] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2007.669229] ? ___might_sleep+0x163/0x280 [ 2007.673399] ? __might_sleep+0x95/0x190 [ 2007.677396] __alloc_pages_nodemask+0x1ee/0x760 [ 2007.682084] ? check_preemption_disabled+0x48/0x290 [ 2007.687120] ? __alloc_pages_slowpath+0x2870/0x2870 [ 2007.692166] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2007.697738] alloc_pages_current+0x107/0x210 [ 2007.702185] get_zeroed_page+0x14/0x50 [ 2007.706097] mon_alloc_buff+0xc2/0x190 [ 2007.710000] ? mon_bin_ioctl+0x48e/0xc80 [ 2007.716569] mon_bin_ioctl+0x4ad/0xc80 [ 2007.720493] ? mon_bin_get_event+0x450/0x450 [ 2007.724922] ? __fget+0x340/0x540 [ 2007.728399] ? ___might_sleep+0x163/0x280 [ 2007.732576] ? __might_sleep+0x95/0x190 [ 2007.736577] ? mon_bin_get_event+0x450/0x450 [ 2007.741013] do_vfs_ioctl+0xd6e/0x1390 [ 2007.744919] ? selinux_file_ioctl+0x46f/0x5e0 [ 2007.749450] ? selinux_file_ioctl+0x125/0x5e0 [ 2007.753963] ? ioctl_preallocate+0x210/0x210 [ 2007.758389] ? selinux_file_mprotect+0x620/0x620 [ 2007.763171] ? iterate_fd+0x360/0x360 [ 2007.766993] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2007.772559] ? fput+0x128/0x1a0 [ 2007.775865] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2007.781426] ? security_file_ioctl+0x93/0xc0 [ 2007.785856] ksys_ioctl+0xab/0xd0 [ 2007.789347] __x64_sys_ioctl+0x73/0xb0 [ 2007.793262] do_syscall_64+0x103/0x610 [ 2007.797183] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2007.802392] RIP: 0033:0x458da9 [ 2007.805609] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2007.825438] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2007.833284] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 2007.840604] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 2007.847905] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2007.855208] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 2007.862501] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x6000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x1f000000, 0x0, 0x0}) [ 2007.890759] sd 0:0:1:0: [sg0] tag#523 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2007.899512] sd 0:0:1:0: [sg0] tag#523 CDB: opcode=0xe5 (vendor) [ 2007.905734] sd 0:0:1:0: [sg0] tag#523 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2007.914787] sd 0:0:1:0: [sg0] tag#523 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2007.924775] sd 0:0:1:0: [sg0] tag#523 CDB[20]: a0 17:16:35 executing program 2 (fault-call:3 fault-nth:63): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:35 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x410000, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x30000, 0x0) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000000c0)={r1, r2, 0x5, 0x1000, &(0x7f0000000380)="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", 0x101, 0x0, 0x30dc, 0x8, 0x9, 0x2, 0x800, 'syz0\x00'}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r4 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r4, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000001380)=ANY=[@ANYBLOB="34000000f1f970c6bc65f0f021dd12b13cf0119ec934bad13037cfea7f67d82c02fc4f3265f4040000000000000010ffa6", @ANYRES16=r5, @ANYBLOB="010226bd7000fcdbdf250100000000000000014100000018001700000005000000027564703a73797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 17:16:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x7000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3, 0x40000) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00000001c0)) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000240)={0x76d, 0xb, 0x4, 0x80400, {0x0, 0x7530}, {0x0, 0x0, 0x1, 0x7, 0x6, 0x64, "d38f7e2b"}, 0xffffffffffffffee, 0x6, @fd=r2, 0x4}) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) ioctl$SG_IO(r3, 0x2286, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) 17:16:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x20000000, 0x0, 0x0}) 17:16:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0xffffff7f00000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x80000, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x8000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:35 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x48000000, 0x0, 0x0}) 17:16:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0xffffffffffffffff, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2008.269559] FAULT_INJECTION: forcing a failure. [ 2008.269559] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2008.401152] CPU: 1 PID: 7935 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 2008.408074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2008.417460] Call Trace: [ 2008.420087] dump_stack+0x172/0x1f0 [ 2008.423764] should_fail.cold+0xa/0x1b [ 2008.427707] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2008.432844] ? ___might_sleep+0x163/0x280 [ 2008.437033] ? __might_sleep+0x95/0x190 [ 2008.441134] __alloc_pages_nodemask+0x1ee/0x760 [ 2008.445833] ? check_preemption_disabled+0x48/0x290 17:16:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ftruncate(r1, 0x200000007) r2 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0xff0, 0x9, 0x0, 0x3, 0x1b}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r3, 0x1}, &(0x7f00000002c0)=0x8) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000040)={0x0, 0x400000000000000, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$int_out(r0, 0x5462, &(0x7f00000000c0)) [ 2008.450884] ? __alloc_pages_slowpath+0x2870/0x2870 [ 2008.456313] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2008.461894] alloc_pages_current+0x107/0x210 [ 2008.466349] get_zeroed_page+0x14/0x50 [ 2008.470265] mon_alloc_buff+0xc2/0x190 [ 2008.474177] ? mon_bin_ioctl+0x48e/0xc80 [ 2008.478290] mon_bin_ioctl+0x4ad/0xc80 [ 2008.478324] ? mon_bin_get_event+0x450/0x450 [ 2008.478346] ? __fget+0x340/0x540 [ 2008.490221] ? ___might_sleep+0x163/0x280 [ 2008.494409] ? __might_sleep+0x95/0x190 [ 2008.498414] ? mon_bin_get_event+0x450/0x450 [ 2008.502860] do_vfs_ioctl+0xd6e/0x1390 [ 2008.506772] ? selinux_file_ioctl+0x46f/0x5e0 [ 2008.511311] ? selinux_file_ioctl+0x125/0x5e0 [ 2008.511334] ? ioctl_preallocate+0x210/0x210 [ 2008.511347] ? selinux_file_mprotect+0x620/0x620 [ 2008.511372] ? iterate_fd+0x360/0x360 [ 2008.511396] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2008.520329] ? fput+0x128/0x1a0 [ 2008.520357] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2008.520379] ? security_file_ioctl+0x93/0xc0 [ 2008.547771] ksys_ioctl+0xab/0xd0 [ 2008.551264] __x64_sys_ioctl+0x73/0xb0 [ 2008.555206] do_syscall_64+0x103/0x610 [ 2008.559132] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2008.564354] RIP: 0033:0x458da9 [ 2008.567580] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2008.586506] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2008.594244] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 2008.594254] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 2008.594262] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2008.594270] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 2008.594277] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:35 executing program 2 (fault-call:3 fault-nth:64): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) r1 = socket(0xb, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x143, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x20080) getsockopt$ax25_int(r1, 0x101, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x2, @mcast1, 0x80000001}], 0x1c) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000001c0)=0x9, 0x4) ioctl$SG_IO(r2, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4c000000, 0x0, 0x0}) 17:16:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x400, 0x0) preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000080)=""/209, 0xd1}, {&(0x7f0000000240)=""/175, 0xaf}, {&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000180)=""/46, 0x2e}, {&(0x7f0000000440)=""/207, 0xcf}, {&(0x7f0000000540)=""/216, 0xd8}], 0x6, 0x0) ioctl$KDENABIO(r2, 0x4b36) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0xfffffff, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000080)={0x8, 0x1, 0x7, 0x3f, 0x4}, 0xc) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x393) prctl$PR_GET_SECUREBITS(0x1b) 17:16:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x60000000, 0x0, 0x0}) 17:16:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x3, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x1f000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2008.797351] FAULT_INJECTION: forcing a failure. [ 2008.797351] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2008.861001] CPU: 1 PID: 7979 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 2008.868017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2008.877413] Call Trace: [ 2008.880049] dump_stack+0x172/0x1f0 [ 2008.883728] should_fail.cold+0xa/0x1b [ 2008.887677] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2008.892853] ? ___might_sleep+0x163/0x280 [ 2008.897044] ? __might_sleep+0x95/0x190 [ 2008.901057] __alloc_pages_nodemask+0x1ee/0x760 [ 2008.905768] ? fs_reclaim_acquire+0x20/0x20 17:16:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x3f000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x68000000, 0x0, 0x0}) [ 2008.910134] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2008.915716] ? __alloc_pages_slowpath+0x2870/0x2870 [ 2008.920788] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2008.926365] alloc_pages_current+0x107/0x210 [ 2008.930828] get_zeroed_page+0x14/0x50 [ 2008.934746] mon_alloc_buff+0xc2/0x190 [ 2008.938657] ? mon_bin_ioctl+0x48e/0xc80 [ 2008.942749] mon_bin_ioctl+0x4ad/0xc80 [ 2008.946674] ? mon_bin_get_event+0x450/0x450 [ 2008.960433] ? __fget+0x340/0x540 [ 2008.963931] ? ___might_sleep+0x163/0x280 [ 2008.968119] ? __might_sleep+0x95/0x190 [ 2008.972132] ? mon_bin_get_event+0x450/0x450 [ 2008.976578] do_vfs_ioctl+0xd6e/0x1390 [ 2008.980496] ? selinux_file_ioctl+0x46f/0x5e0 [ 2008.985022] ? selinux_file_ioctl+0x125/0x5e0 [ 2008.989554] ? ioctl_preallocate+0x210/0x210 [ 2008.993989] ? selinux_file_mprotect+0x620/0x620 [ 2008.998787] ? iterate_fd+0x360/0x360 [ 2009.002621] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2009.008200] ? fput+0x128/0x1a0 [ 2009.011527] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2009.017107] ? security_file_ioctl+0x93/0xc0 [ 2009.021557] ksys_ioctl+0xab/0xd0 [ 2009.025051] __x64_sys_ioctl+0x73/0xb0 [ 2009.028979] do_syscall_64+0x103/0x610 [ 2009.032897] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2009.038102] RIP: 0033:0x458da9 [ 2009.041319] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2009.060248] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2009.068005] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 2009.075313] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 2009.082611] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2009.089908] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 2009.097303] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:36 executing program 2 (fault-call:3 fault-nth:65): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x4, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x48000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x6c000000, 0x0, 0x0}) 17:16:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x4, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x24) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r3, 0x80000000, 0x8}, 0xc) ioctl$SG_IO(r1, 0x2284, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:36 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x48000) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, &(0x7f0000000100)={@dev, @local, 0x0}, &(0x7f0000000140)=0xc) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000180)=@hci={0x1f, 0x0}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)=""/246, 0xf6}, {&(0x7f0000000240)=""/76, 0x4c}, {&(0x7f00000002c0)=""/57, 0x39}, {&(0x7f0000000480)}, {&(0x7f00000004c0)=""/243, 0xf3}], 0x5, &(0x7f0000000640)=""/45, 0x2d}, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000006c0)={{{@in6=@mcast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f00000007c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000800)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000900)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000000940)={@multicast1, @multicast1, 0x0}, &(0x7f0000000980)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004600)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000004700)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004740)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000004840)=0xe8) preadv(r0, &(0x7f0000000480)=[{&(0x7f00000009c0)=""/93, 0x5d}, {&(0x7f0000000a40)=""/178, 0xb2}], 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004940)={{{@in, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@loopback}}, &(0x7f0000004a40)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000004a80)={@rand_addr, @broadcast, 0x0}, &(0x7f0000004ac0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004b00)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000004c00)=0xe8) accept$packet(0xffffffffffffff9c, &(0x7f0000004c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000004c80)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000004cc0)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000004dc0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004e00)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000004f00)=0xe8) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000004f40)={@empty, 0x0}, &(0x7f0000004f80)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000005680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40208}, 0xc, &(0x7f0000005640)={&(0x7f0000004fc0)={0x680, r1, 0x210, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x148, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffff20a5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x6, 0x4, 0x2, 0x6}, {0x5d28, 0x80000000, 0x8000, 0x3}, {0x7b, 0x10001, 0x0, 0x8000000000000}, {0x20, 0x101, 0x8, 0xfeb}]}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r3}, {0x18c, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x10000}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r7}, {0x78, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x400}}}]}}, {{0x8, 0x1, r12}, {0x140, 0x2, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x2, 0x7707, 0xa70, 0x8000}, {0x4, 0x80, 0x7fffffff}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r13}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0x7, 0x2243, 0x2, 0xd5c}, {0x3, 0xc8, 0x10cc, 0xfffffffffffffff9}, {0x13, 0x3, 0x4, 0x200000000000000}, {0x7, 0x1, 0x4, 0x10000}, {0xfffffffffffffffd, 0x62, 0xfff}, {0x2, 0x1, 0x71, 0x9}, {0x80000001, 0x1f, 0x65, 0x7001}, {0xbd9, 0x4, 0xffffffffffffffc0, 0x1}, {0x8, 0x4, 0x0, 0x1}]}}}]}}, {{0x8, 0x1, r14}, {0xe8, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x600000}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x2f0}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xd9}}}]}}]}, 0x680}, 0x1, 0x0, 0x0, 0x14}, 0x40) r16 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r16, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r17 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r17, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x8000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x4c000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x5, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2009.266837] FAULT_INJECTION: forcing a failure. [ 2009.266837] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2009.310929] CPU: 0 PID: 8017 Comm: syz-executor.2 Not tainted 4.19.38 #6 [ 2009.317859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2009.327419] Call Trace: [ 2009.330053] dump_stack+0x172/0x1f0 [ 2009.333731] should_fail.cold+0xa/0x1b [ 2009.337689] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2009.342828] ? ___might_sleep+0x163/0x280 [ 2009.347014] ? __might_sleep+0x95/0x190 [ 2009.351024] __alloc_pages_nodemask+0x1ee/0x760 [ 2009.355731] ? fs_reclaim_acquire+0x20/0x20 [ 2009.360088] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2009.365931] ? __alloc_pages_slowpath+0x2870/0x2870 [ 2009.370995] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2009.376604] alloc_pages_current+0x107/0x210 [ 2009.381049] get_zeroed_page+0x14/0x50 [ 2009.384957] mon_alloc_buff+0xc2/0x190 [ 2009.388863] ? mon_bin_ioctl+0x48e/0xc80 [ 2009.392949] mon_bin_ioctl+0x4ad/0xc80 [ 2009.392969] ? mon_bin_get_event+0x450/0x450 [ 2009.392986] ? __fget+0x340/0x540 [ 2009.393003] ? ___might_sleep+0x163/0x280 [ 2009.393019] ? __might_sleep+0x95/0x190 [ 2009.393034] ? mon_bin_get_event+0x450/0x450 [ 2009.393055] do_vfs_ioctl+0xd6e/0x1390 [ 2009.412924] ? selinux_file_ioctl+0x46f/0x5e0 [ 2009.412940] ? selinux_file_ioctl+0x125/0x5e0 [ 2009.412959] ? ioctl_preallocate+0x210/0x210 [ 2009.412971] ? selinux_file_mprotect+0x620/0x620 [ 2009.412994] ? iterate_fd+0x360/0x360 [ 2009.413015] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2009.413034] ? fput+0x128/0x1a0 [ 2009.452147] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2009.457733] ? security_file_ioctl+0x93/0xc0 [ 2009.462177] ksys_ioctl+0xab/0xd0 [ 2009.465655] __x64_sys_ioctl+0x73/0xb0 [ 2009.469578] do_syscall_64+0x103/0x610 [ 2009.473502] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2009.478720] RIP: 0033:0x458da9 [ 2009.481939] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2009.500875] RSP: 002b:00007f9a65dd5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:16:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x6, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x70000000, 0x0, 0x0}) [ 2009.508627] RAX: ffffffffffffffda RBX: 00007f9a65dd5c90 RCX: 0000000000458da9 [ 2009.515924] RDX: 0000000000100002 RSI: 0000000000009204 RDI: 0000000000000004 [ 2009.523220] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2009.530522] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a65dd66d4 [ 2009.537856] R13: 00000000004c1ef7 R14: 00000000004d4730 R15: 0000000000000005 17:16:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x74000000, 0x0, 0x0}) 17:16:36 executing program 2 (fault-call:3 fault-nth:66): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x7, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x10000, 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f00000000c0)=""/63) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000040)=0x2) 17:16:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x68000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x8, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x7a000000, 0x0, 0x0}) 17:16:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x6c000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:37 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x2, 0x101001) lsetxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f0000000140)=@v2={0x3, 0x0, 0x13, 0x5, 0x13, "74db75f49bc18db9dc49cc1b89927809cfad4c"}, 0x1d, 0x2) dup2(r0, r0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0xc5, @rand_addr="97ad33e8546a3f7b3127f3636daacf15", 0x86d}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e20, 0x1f, @remote, 0x32}], 0x2e6) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0xfc000000, 0x0, 0x0}) 17:16:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x48, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0xfeffffff, 0x0, 0x0}) 17:16:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x70000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x8000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {0xffffffffffffffff, r2}}, 0x18) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r3, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x4c, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x2, 0x100002) 17:16:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0xffffff0f, 0x0, 0x0}) 17:16:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x5d, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x74000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100000001, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xfff, 0x4800) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r2, 0x2, 0x1, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x4b47, 0x100002) 17:16:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x7a000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x4b49, 0x100002) 17:16:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f0000000100)={{0x0, @addr=0x72a}, 0x8, 0x4, 0x88}) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xa6, 0x4140) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000080)={0xf000, 0x1000}) 17:16:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x60, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0xffffff7f, 0x0, 0x0}) 17:16:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0xac000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:37 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x68, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x541b, 0x100002) 17:16:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0xfffffffe, 0x0, 0x0}) 17:16:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:netcontrol_device_t:s0\x00', 0x29, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @bcast, @bpq0='bpq0\x00', 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @null]}) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:38 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x6c, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0xfeffffff, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x5421, 0x100002) 17:16:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x70, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x5450, 0x100002) 17:16:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x1000000000000, 0x0, 0x0}) 17:16:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0afc1f123c123f319bd07074c11b4b7017b1bca674e74e0f26c2b86e58f645b96b7db875bdaa19fb79e3dc73f0d3a31fad4d74036f03be32888f738611cb38ca9d0f6301656e570ef0ade921b771a2ea062743559e5f0431fe610af9e00557f50eb3b67e80aadb910c3aa0cbae97b0d9b38df842eb5fb13fdb7f5edac190c29673a12918c94bf1cd134f0bc111c810b45d3d0d66902f00ea242820aba70c43d2703831c088f2781fc75171151399c675393e50a2a0ed3e3980bd1b6bd772b76d") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:38 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0xffffff0f, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x74, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2011.406927] scsi_io_completion_action: 51 callbacks suppressed [ 2011.406962] sd 0:0:1:0: [sg0] tag#705 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2011.421883] sd 0:0:1:0: [sg0] tag#705 CDB: opcode=0xe5 (vendor) [ 2011.428004] sd 0:0:1:0: [sg0] tag#705 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2011.436917] sd 0:0:1:0: [sg0] tag#705 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2011.445807] sd 0:0:1:0: [sg0] tag#705 CDB[20]: a0 17:16:38 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='ip_vti0\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x7b, 0x10002) sendmmsg$alg(r2, &(0x7f00000057c0)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x30, 0x4}, {0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="68221f9031418905ae71d620f6c307fd7811a54f04cb", 0x16}, {&(0x7f0000000380)="3f8076cfdad532ec054d85624044a532ea735c1d73b1ff4099158ed751b2c6b9e8bb25ebbe1f6afe4e50574221bf935e5af7f70214d5282711a6486de75c6170dba037b4a771400e805657298e1240fe9b5afb0bf17cb6155f4d47defa913b134ee6f9ded704a925e0e21e0dda29a92a936e39291449dc65b28c056467ec7656b31deb0dd61f6993a0ef1c920024582cf13738de84e93e3e167d41f99064a1539cfcf08c875eb6ae9ad83db41b42835339bf435c3229ffc14c5993a2e25a93a4aa6677918a6bfa37de2ce47b35ae43a41208542bd4f59ffb3872252df4cf30a749ecb4c36475b59014dc793084f9dfa26bb7505ee071c898f19aa63cf24539c38779f6ad9beb1ea838cdf7e035255be677de465830129e4414b8ca36d6ce0a02ac79ea26791c7fb18f2571171e19d246397b32570ec3d4dfc06a9bc859d27c3ad241460629d78d978008eb02d96515d62e85b9322d8a4db4ff54fa76d7db87446e9e192d9481f03c272a85117b0af43d78bd3e07cf84edcbdd51850813026cfec9f2736a2775539645b7e4fb721ba3f4d65ef97d1a11c0354238a0f6468e1d9a1851e978b903481900a740d76d318eba1ce7edbea0d66977c063e9f1115950e9e368c02d81624aab69599c66121b8b532d9dde9759dbdd0f4a78f35ab473fee544ff468eac91110ad2aa2a92f971fc1cdee0cb9044d2b13f6c432a64478109597873e058c26994c654cbf84ed3bcc7b44b665223ad594b80f48c56ec44ea349c4451fcdbbd1889a60f533780f122f60c77affedd2d77ce29ca3b25644c98c94731f88bdbb0242bf6fe519cdd515e81ee11f238090e274f9f3ccf0db7c20d665457a55594075f77520185b63abb7c0e71b7cbbb8cdf93c18a52b602d7c442c3dcf99ea8fc273a833c1b3493a6c7a760c7f6c0f58740509d653c8d25cc57d38b7f950e12a0ee5a20418b99612f08868db8f5135ddbf46f19a76647863b68a944dda016c6c4c349fc4a59de71c41bbb83e3581c91d5775ec7fc386fbd045289723f7019abb5b7c26e7eff670af47f0c9ff01d7ddecb77ead0278714a4baf79ac49818ce6d52eefb804c18aaf745a6cad54218bbd01282c12be120e76edba86660721ac3f8dd8fa8902aadd9088c9b888f47a4987dd1d05c14c11835812b5022c940f82b736353e308e305436ba95e2c3b35fe82566c4c79bd1c91a48d8e228b210867079fd4f42dd0876c34af42dd1ef3dd339efd85a6a6a48b0bcbbc8d09c57ebaeaa1f134a85e4450afc3cd20f09789fc582bf5b6bffb1a43a7b7fced7944e232083cc71e5ecde71e6d288fff316caaba044f41402b3b0e1f958610380a8fcbfc570e41f15ce4ac40d1ec5802455ce6bd9ade1d9648b114d99cdfe684c687b94cd5cc87b94bcaf40cb41c6a2f1ff67d489d6a96c5c677f7b1b69f5d50839ca7b74107f598cebf03d1cfc7eb12ec8555e17f058d0e29587241b0029c099ff7b4b8abd9e95175cd6c943abd4d80f634b98e10f95a51b86cb7dba2a134bcff9a6ed447eb262962e166e66c42c77a9c4c3ea721c4bbb835052274262fa7b32b6885b4a9dfda18d5e14011e889f3604aea3f6d6fba2b4d2e40adc414c320f42d12ba372e2f79bb9e304cb4df424cadaf00d1f66ae97f1fac77870e8cd5271ab9badebaf4e407a5dbeaf2199443944e4bfa32f3254146d545ae6d23ee7adf520c97c0015f5ae3499fa28e10a44bc1ccb4190082c7129a21851e6efef7d4c31d440839e05b42db45d1cbee300e3086ae2c274eb00cca54c709e930319ad9e8c103ab751257b00b841fe6b8834a17ce65d710559ccb9ee2ea07e8676a18550254bb3162f6f746c9505725a2cc1f21c6b7c422db0dd53dae60b03cc9a504f7c1a00a68732aa8bbae111327eab742ac96b3c99f8a8c5125b69e143309eefa11fdbf1561e456768e17aab3b6513b1e1d754e7e00aa9e707af25dda00c260f956649bc6ab5c59306797baf5bf6a5b9e1d4fbc7cbc595fd0ac004918b3f264e9606e9ccf7840ca21dd4dd302b45a8d52f77e8546f4f0dd3c4b50541f990783be22d2b6d96d0399fac5163b021636d9589dbdbc70ff74f39f5de08aef442e9adb61d8cb9133d3eb24b946437fca6f1ec1c4f4b4b4cd05910c50f89a41eb0f95e70a1d00f20e5a57edd4e9b395f1079e592ad81a2ead65796298f036c02e064e095b4fd9f5a20dacaa0d903fcfb4293856715847b1a2effcd515dc12016cff3eab05a68d3e7e6eb1d95cf6f92ba4497ec16e27e09687b111943e8175890bd8a056a0fc19507057cc9347bd845e1805d9b5e623e9446a42645c039c400225f7013dba27154633b8567759cc672a4795fc1d47d75bd0803a6d538ab85027ad9a0cfdd2da4f56ea91a14af6d5632b7f9a5fa7b1da0be80e20618edd9683d8242981bdfaaba9edcca89abc176426355faaef0db1821ca019da72532612447cb0da4b9d7892ebce2b37a32318187fbb3cf90ddc280e88cb62293ed5a3d8f3ba07d8fbf4e8deae6f9288fa7513f6d3853304a4d97b5968fa24017f9934a92f610215f519387ce4b2efafc5d446e190d94f3eab9acb2703f2f524d4bf452f155e3eb2200d1a8f9c50ea824a3fb05aaeddef9c0d6e32b3d2b48d2e7b7c2e2300e25cd5e357aa302a8b0b9a09c19fc3a15b428e23b72506d42aa50d236b7631c56cc5821d2fb73ade1ba7603aaa2554f465a5f117220471ec3721408d9325ba7ca3f4ec99f4dee8e1c443abe228019ccc771264ddb89385a3efe076e2c70095ea97356d9570a471f06ccd6597f0a588493a295f479e33492aa9986a1814af753e26f8bfa446714d49c8fd720ad9ebe10803e60b7968ed350fa8288a074f24623032aea1e36e4bc4de010b2c4b1c2377daa715952bf3726e25a26070c546c667156c8db7c3c6ab3133d5fdbdfc44af6fac4598dc6d93d7f5ede426e34f22b4d0d1d507e91a0c7396b837c6e1498d0688afdfcd5d74e402cf436a567c8e9b374b9b99ed8584188b32a6e00fe51b5065e1b8f1e9fa2e0d30c45ed8f185fca1b1d684cf6290987f06fefb763752b731fbb6007a96fed98f87ffeb800aa435508737556165e49d1cc891b06aa6d21aea891fe520ec72ad081bbf7e6976543f20aa7726d850b2bb7eb5add51447ac0a298585f3029c0f227b938eb65aaf31c19a8ce58b6e322b9d02c648905d62eee272e0169f86bcf5ddeb1dcd1dc9026ac595923b08b59ef2094b423c8bf939c9d4fe25878eafcc0d48944856aded226dbb29b2a64fffd09652269e1c5cf14bfa2cdcaaec9d74177dc47448c8d24caf6f112257f3eb5c20e379e625c2c3181bca06683a338c0dce14c6421bfb611b6004b7ed65f943b6b8c8515dc2b03fd6f250f2a2920bd0cf9e915eff71f42ccae28e7f4ff99543bb06df14678915774d88b65a428241afd30d0d2b63a60af1f19b0c11fd6010143e2db60bf41e2450d60354e3e6ab351545fe7252cfd09b463e99224e480d890142f6d0ca5838464b8a037f15dfe44bd36866746ae0848ad87b216b18805b4bf2b885ba3edab672a95dbbeadce6ee814b3060494ea174b280b19ef082082c5db9947256e9bbd3ff916174e493c7315fb31a197bab9dd1e62c6b701b91d5930f1ec41d617ded0538c37a52b95d60b1fbe0795f18358670c9c6f45b630fdc52e9139534bcc336c29290cfbeba49fc035ff7d2689a4b661b346aeca3231a2acb6b663aaeb1821206f9fd6d48ac21da6440a1584be4bcc4cbe8529f46b896b809a7785e8661570a31a4c92a88ded32fbfa6dbdb977473eb5c77f99e30d8d80e135316b6bd27199ef95f41b8d3e49918860fefe19ca19a0dc4628ea65292f01b3146cf03cb828ade01767c5524b472b42ac67beb3c25ddfa1d971f3c100020c7b6681a35f9fef371df800010ced99c13375cc588b65f4ac6daa2f2b302f03a631e44e2b014fd651733251c2683b9da0c27127da606205e057b526808b6b4053d3f573704cdd4fa614aa6fa73187b45165a8612bbd33fdd117bbb9373ab1353ea463c6a12a4fc1bfbce002629e33ed5f0f2f16fcf8a11a8e103df5c923a844fdc380c1495c572e58ea3a62ea3b6772140b25a1b3248f746cb68b4e71fda04d5d380b33f71ee9e0a5be127d99d9a739441a4a61c90db4ad6a0d203f0799a9a012b23ab02fcbe115a98ad1f8f156837401342a061e5cb846934995b7ba2bd8ad1ff11c9c6a8aaedfe5dbd043981f74434822602166e942981fbd22e415ee4a4046c496d8181cb508c670f94e5a8f36a43a309653c284224629a7cd1729b1de0d6fd234b9bf23ec15469ea2a78f608e5d6e599348ae02367cc36b27963b549d201e89529547476d178974cc6dc6c87cc94e98812c09e7938b57fec23221cde30fca1614c3e9875121a938324194e5d87fa426b916dca5bf29e8fad4eb1c5196546024dac86e22673cd7ce19541d177cd4c813beb272e11710fb674d0129fbf474cb450d01e3894c5e44c042c2e39d8376487cf612c9e8a24247a24a71c3501aa4fe62bb83b504c9f81983262d3af33e496058a1a7e6b960a7775cd170c323883610c7fa8db10964e96702e97c8c44ede64363fb222128c67b1ca4510a47f398efc3e2a9e609cd0ec34b2a09c58ca3db8d3c412254819f53e3be8de09321680cb7857f71f1cfa4f5bc25cfabd894680b6f85c0d132d3794d8cf18cb78d1cb88f901072c69385562ad45cead2ecf886abc862baf1115919954cb962f6b03ed6da7934b52a347ba9d6ca995ffec34f1f57b4433fd27d5f4f7bfd8f53576d81b3f98eb19864e4281c7c10ad1b4ca75357ef4726d14cb538c02847948ce4a9df7867c0a8bd973eff5030bd3595d6f432b1b045da73a628cf27871d6600898a0da4c2c21aac33973d19ba51ff37b4bd1ff73d79a42d89a88c662f48185788ff50d3483c0ce119faf43dd7b981b1bfcbbc2aa59c313669adb2307dc1aff2515b6a2c824b2e5e97f2411b197c292f11fae3ef3cecfa1e5462e3be7a68d06b69116f3643ee3f6701521062a50d7e9086e1e9b4dc1dfbbf75804e87eb9905cb7766046d052b60a26d3bcd82492368d1c04fac80fbd7b270942d7cc7fe4a918fcee8db32c6f28d0983193e0e125bbdb2a1413f657b04b9cb08fcb8adeff072566728851d1cc78687e991913b64b28c220ae6ce101157e854e112f65e894f8bc4a1880be0780dd0797693fc95e7b1cc50fabb625c31a66939e9911692db98abf7d808b225c17a6bff479fa010592045a8421e6fd62476e8d3c3104cfc43934cd412c11eb65b9d9e8ee5e7cae392f70621bb9606cda8104fcba39cdc1b4ec320ceb2e9c7a09f70d14e485d26fe8ec281f2b534f8eda2dab8146161eae35d512e73a0d54b0e943b5fa5921977bdb693ec06889404ad7fa446d10ee81b710a1c5a50114a0561eafcd5e64d3699b37142abef37f3aaf253588f6bc48e6483fd65c7c9ec08433570cfca6c66adfa7b9b39649b555b8ca6bff343bf5e04a891f1d0d9ae45c2b94c1d00842bccd891be5a15b02e3efb80908ca29867cabd0aeec8564f43bf179f5da031daaee866691122e62a5eb19a0eb7b8eac8c19acfad91e29114c31129824cc5665b936e553aed5d74e8aacb171819da04aa3e6c96ef2c1dd883ad05d3d25964d60f5db7eb2cb91ce0ae997b7628fdfd727eeb441eb7f33b3773facb9b0e6e9e50cde6faa2ed1cc8846907c2f59b77f679e487771774ae1bf4c30b7cb2e9cbbfcd76fbbbae7ba5454c88d320b0dc8878485", 0x1000}], 0x2, &(0x7f0000000240), 0x0, 0x20000000}, {0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000000280)="7ec79364f0ba0cb1d5b599b8", 0xc}, {&(0x7f0000002380)="6cc3fb1c35a99c6ae5f0d0272eb1fd5a9f610d60c7cdc469382561816ebd572ce3d5c1d99508d67712c5813b6cbec66af7af2cf8d9a566c16b236b8acb688dbe6285ce18ae6c7f1c3fdc2bda0a335f0d2b892484b2c09f638027a38a8a942cfbfcd4c331b7d55dd08265acba0d653e93053db688088f1af6cf6c27838d026dfb351ce6b1828c2f25dafc4ccff93673ee8024c412467f1ce2a39f07453fcea4db6d3601798b0a2fa22db390073835", 0xae}, {&(0x7f0000002440)="4c330e351d72ac092ae155a06ebc43a01212e7719488fff22309fa7531e8726ac9513debba8cae6c313c35e9f0f9289248910968533d9ecf198532646c4184ee0b785c756e52bb451898823bf62b065b483706550127c8aea4df", 0x5a}, {&(0x7f00000024c0)="1a60b57cc88d47da4909b6e609c48f51b1a0639e35d0edb47f96720de2d2557e90961de00e1ac8bfe261a545161d06d83266689c080f89f2d861dc8d406c8c5b0abca23d6b2e1810ea28f1a86747290b3c036c15b9e2049b82b0988a2395a3f19f119d2972d8393581fa7290b94a111ca72b068b1ffa22473110b3782282516ae3f5281ed7", 0x85}, {&(0x7f00000002c0)="e3655725188f5de52fad", 0xa}, {&(0x7f0000002580)="c3112aa4351c15325f915397e221cbce8c51bf7389f1099869ad0995e547306c8a6e883c20b8e63a6c742174050649c62f0e6f959185e8b85be9c5fe2fa2000565aa9eea7728a5172fffaad7ff78c2817770b5aa095fd71b5348094f0011cf572721760e5e0e70bedd4ad4319286454b813a28bcf76087", 0x77}, {&(0x7f0000002600)="16d53f863309f0437ca7c3a99e774168a1a0c68cc689d9b5ebb84909f931ca750de7281533aea4542e80c631e4a2bc1e1b943ee52f306c0044fe89379126f9fc4a0a767f9e5aa1d7b57acf19c2cf96f82765db647a7580afc904bad5f90c9153fa1d82e75e0207e10fad94c0f3cc2609d7879edb3284f8a088099c341f03eeeadf28467bf7378536b826234283ff22c2bdf35a37d4902983b08e245cbf9fbcf4bd4f93b7e5fc8562af8ff6ee9ec4a5cfec9d9b23fdb9751a887e0c8de06ac76fe11daa21ecfa48bb3e946f8dd1b7b1915db37e5467124ce5c6808e172f", 0xdd}], 0x8, &(0x7f0000002780)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x28, 0x117, 0x2, 0xd, "81a057d7bcf0df538819c0a94d"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x78, 0x117, 0x2, 0x5f, "4c0717d2a5982cbd15c227af1a6a810829c6893f09d770f4aad02b13f4e5d3603262c9330e1ecff22cf38988638f2b9536b792d5338e902413a6e9c6dfc967ddb24922ef871c36856e270dad2e17b1d97e17aac0f2482ca27c21be31b62386"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xcda}], 0x118, 0x8010}, {0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f00000028c0)="cbc7c37153dad711d2fe3b3df03be3420eea78eae529758b8f4af59ccb84e725509620e118cba9ca292effc0606ff0b695c5056127af805542ad93cfecbd29be35bbe4a90287a8e9d5c27617a42642f7dbbd4b983285af63bb3252d746c8f9b633539fa4eb94a6611597c00a638acb2b247789fc9ca4498f7b", 0x79}, {&(0x7f0000002940)="a71004068eccf52a49e154598c5d1dff07dabace4c1580b4dbfec25c3a80c00c1d1b6bc73b2caa53ac97d2c66acd27f62c400e3d1a92954753b80c15d20b0a6242f6909540a7d7fce8607ee2749e86b8a3a58bb5b19b2104f8379da6b2b1e4dca834d39d70ad2a1f6e34c00f8ff0545631f3fc396f1f23e468cf2d65ef00876f548f0472004e", 0x86}, {&(0x7f0000002a00)="70f982416ff70ca66e1199cdfa4789a2377c942fee927a221f6b4f4353e9012177506e87da556b1c6adf88fc0511f0fbda9b3fc25194db24dae571655ec9c03721bc11a83dca16b64bbf319f4568786af653cef2ad4914f3d6ab3b9764c7e8cd52889e4d9b5b99523d", 0x69}], 0x3, &(0x7f0000002ac0)=[@iv={0xd8, 0x117, 0x2, 0xc2, "e66e94c924d38a1b42371bf5aed505ae595c43058338f9283e8d0c89693d5ceb18e8a5fa2878fbb923059330e9d4948d41bb688acb1c9d6a2e0a15b48379c11ae17e4f8458c781a64a93525a22e113245f83a3631477914f98bb329d17e0feafb9d83fd26b8d5e3006e88318f945be398ce8fdfdf2b9c9b681416190b332d5da39d8b5c838557994600963f0e4404a37d94ea28e9851cabb7e735ff69ff3d876dcf89c8eb8f902cd3f35fe36ac73e30e696c9f5946791182013e56f0bd6b60963038"}, @iv={0x108, 0x117, 0x2, 0xed, "9f85155e649681041ec442a61f61fa276b195d56be2549a695be4188efed1d228dce0478abc48bf863b6bb52410726cd2eeb394fd619b926104fac1242dd18e94337271d396250150dcd928e9038bdf82393ea8b32edb0bab4362d5ed9b186b21708e6e6674b42454de75e73c1d17bbc9e909fdf66fd6fed346dc712f11e24bd1ef3e33327c04908221dadae88df641c19d2e43016bf77d2acddafc8a8121f0da9fe395f9dc2c0690c0a48900d32cb30898d660ac0b7d02e7af999374f44387db3c6e7d2ed099cbd5d8682710c9f2096604ba5d46e467d8379889ef0e5637599a2b30cb10e089f9e77f0c0d75b"}, @op={0x18, 0x117, 0x3, 0x1}], 0x1f8, 0x40}, {0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000002cc0)="13510b2b56bab7", 0x7}, {&(0x7f0000002d00)="9ee88acfcaf148b81a41f6b6085a9d05a128022c12d48550faafda6eed5a312598940e28b281712f8d199974738944918640ed59f3cfd537145fa80d59bb265c0d0f11702462b065f23eaf5391fcc25f5526fec96c29d0fb0f8cffb8c471a3530e84756e4e1aeb5ac47c2dbe31a599eb87adc65154c790c42906b383758ba195d3b51c3a199b8f6cbf19b7452133a7ad3582e5031c42520338a634141b4c0b6d4cd75b360b0cae965807d23cc76c272bfdc6f8233035085a442b42b16b9ef1a0a5c2083a55a0", 0xc6}, {&(0x7f0000002e00)="1b1df4f2e7a28c157e786800c091f7e81706963927c9695f969ee721934878ed2bf14cc8e3ab20809d26a999162d469e8b6fb78ef6e3e4f68f0604c44204060ad5e2d8fb18658ff973c2c3a880b9810e94d656bf", 0x54}, {&(0x7f0000002e80)="46ec5fdc7ab4621da2c56a58e14c51d019700beb214e102a288fe7d9a972bff105694f56c592281cb125e2aa4cafabe3c76ea542a94e8c9d0477530db8277dc67e1969a5e8ce23f76628ea5677e9ba4ae8cdc5fd5d3b380de79281a669f631914e3e6919935ced5df21440035a8f45c7a523612e7cf7b379b0f740d47f8383bcbb", 0x81}, {&(0x7f0000002f40)="9455004a27cc91bf4709fcc5228205b910bd9360ad60edb8a413ae6c79e5246ce501b1c5f9d4ca2217680edfd4128a1a2b74c5972f48ff511cb231aaaf332c26f0e025ad10bbfb37acf89e9b163c46668f33b25622eb6551e98aa4152c8ae5b6b7cbe25ecf2cf27a7845c7115fef293e53097b81", 0x74}, {&(0x7f0000002fc0)="b4c504b423ed80f533cf47a14fe15939aac406eacefbce8a4fc1dd2afbbf56d11b67e9ecef480a31e247fc5f3d69d9355aa3942391be7d46945dd8e4344807df9a80297649cc513d7033f206a6defa2e5c68562d1fee80457b796d1f1ea64196d7b1a80f53dff7f5777fcf6ac6278107f52fae88b7d23c975de8699402bd9b2299be80eb52d7b79386902c5da5b75f4ad2d141e3d8e3bacc819d64500fd727845631eb5c0b4997f153d4fc1857dddb1e1f5e3dfe36194036793375c6", 0xbc}], 0x6, &(0x7f0000003100)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x68, 0x117, 0x2, 0x4d, "a4b5bbe185b0e78e2084c360662d9537486942e45d5444d01783b766eb73717352723dc90b5ef4282dbd10b6a2db25ae15ebc026268911dd5d1869e66cd4672a7edf2d1ad09dd7c5ae9c6890ca"}, @op={0x18}], 0x98, 0x20000000}, {0x0, 0x0, &(0x7f0000005500)=[{&(0x7f00000031c0)="d28e6f49649ab5ace30a561727b1a29aff120a6c8c6eb3cbf97542fec9d891c45086791920c5810ad761dfee092bdfdbb2e5b870bd8f15e5f1ed73153ab550edc9b3d7730b4e5dbf30db8ac1e3119a7824027928c4ebe317c68ff993550f5ab167ef9f8d2121925df0118545289f466e496964", 0x73}, {&(0x7f0000003240)="f93dd41cca621d0b6d02f94f0761f24c5fb44fc15bb738c17dfb3fec3545d80f944e8f0d0a00e95f81881690cf4d74835acad620d2b9ee0bb0b2cff281a205f61fca9c6935917cf1bc0da407801c6a4109cb9d698d0c29e5041820807d886e782b840f069e776b4cadcd406c7c3087009193179d851ffb5334f5c62648", 0x7d}, {&(0x7f00000032c0)="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", 0x1000}, {&(0x7f00000042c0)="93604cfd55ba547e67b28d227a43b3b0e7c42bdbfa1be436147f0c2138f80bf716a0f6c507217afe2d8d85723d38812a8479ad568bd79a78352a09410fd032e212280730a83ae7edb00a9a16470db6ed18e6e0c9136465797dbe0a6b57f661bf48d50479da3662fadc63c202f066c82f26e166e93512968e2a2c728a5b7e242e9555ed85f59d5e11e51e3d0ec6c245dff736", 0x92}, {&(0x7f0000004380)="3c309b80403aad9359837d37e98cd7c622828095caf935badb18b5c574c1fe99bfdb20fd13aff755d810f7d0fe0c1fdfffb5a7a0f74d64f8de6b04ebb06fdeba02ad4297da77ba93b0b9c80ecad35442a38379f01ce6b9ed597ab60c8fdf9af3800bfe6652d32d044c1bc381200e3ca0ac4aba0b9787ba1550dd86578ce4da43063826ac892883b2082ab2ef3b590a9522b13413331f64c4", 0x98}, {&(0x7f0000004440)="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", 0x1000}, {&(0x7f0000005440)="974db1ea3e4f451b2e9f5998d064d4fe4648f6ce0e3109ce8289d9a32ee331b4df8c39962ba2cd08936f019b07a6968a5a114c92f31a667c636496bf298d17e8d6bc20c1fdd82dc6e5419d159b0e9824ec2bf391d0f0a58fcada04c5917c929c4ac1631c57c568f7ae262a36a09f9a7c77bf5e8b749ae3bc26af0a9aa606582d494ca9613fe494549ca87c3a33102abd309b154e2b73bc992121c3079c59d5324802c50294921630a83737a7a456", 0xae}], 0x7, &(0x7f0000005580)=[@op={0x18}, @iv={0xb8, 0x117, 0x2, 0x9e, "813dd06bbbede5eb750e36f6c1aff112234a1805746c1a4e1fd7aee18469fd55347069d908e54097042197b474de79cc4f6563d5a65730225963a70702ca2eb3b2411cf20e6bc44d0c097b18f4c59aa6ba5688e20ae6d13ec4871902bfc5717629f7bcaa194c0285fc73f307114006bd4a186be4c7116aaf32b3b62e0f60bc352de0471b25ab8b123690b7c4ed4f117647298fe12f00bf458d0516ab4d74"}, @iv={0xe0, 0x117, 0x2, 0xcb, "7971458ba4ef69f0bdbfa3f178bf1443f3f61ed6b2e51ec7d5ec2ef6ce3de5795e53909b92dff89aa3246b2faa1170cd07f613e9c7170ff3de5b2106c02a2682234dc66d04be2d6e3525b54f4b48882c548d212b887494ea18daf0075344f0e3ef3f707a66f9be16bd40b19584c81f0cdb6b6010038a38bd86c4a132c0e36d8ff79bf422965c84b05f5115aaaef01cc00d8a0d79c257bb990b49fe5f8d0589ec63709a860416124949f876d0d88d7abc6b46a02f21b690be3510238ac4e2e874e57dfe3aadb827ed481dee"}, @assoc={0x18, 0x117, 0x4, 0x8}, @iv={0x40, 0x117, 0x2, 0x2b, "ed7a0a0c6b42ac7ef838f1a4ebb13511768174d77c0bc9bca53db0c17586703796dd69c485a1fb60f38061"}, @assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0x7fffffff}], 0x238, 0x80}], 0x6, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r3, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x5451, 0x100002) [ 2011.485034] sd 0:0:1:0: [sg0] tag#705 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2011.494058] sd 0:0:1:0: [sg0] tag#705 CDB: opcode=0xe5 (vendor) [ 2011.500187] sd 0:0:1:0: [sg0] tag#705 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2011.509207] sd 0:0:1:0: [sg0] tag#705 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2011.518079] sd 0:0:1:0: [sg0] tag#705 CDB[20]: a0 17:16:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0xfffffffe, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2011.541097] sd 0:0:1:0: [sg0] tag#705 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2011.549809] sd 0:0:1:0: [sg0] tag#705 CDB: opcode=0xe5 (vendor) [ 2011.556145] sd 0:0:1:0: [sg0] tag#705 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2011.565580] sd 0:0:1:0: [sg0] tag#705 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2011.565605] sd 0:0:1:0: [sg0] tag#705 CDB[20]: a0 17:16:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x5452, 0x100002) 17:16:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x7a, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:38 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) [ 2011.640509] sd 0:0:1:0: [sg0] tag#688 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2011.649600] sd 0:0:1:0: [sg0] tag#688 CDB: opcode=0xe5 (vendor) [ 2011.655795] sd 0:0:1:0: [sg0] tag#688 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2011.664795] sd 0:0:1:0: [sg0] tag#688 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2011.673662] sd 0:0:1:0: [sg0] tag#688 CDB[20]: a0 17:16:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x20000000000000, 0x0, 0x0}) 17:16:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x10001, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0xd06f, 0x30}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000100)={r2, 0xc7, "20a000afeecc14a059f934860f671f39e8d50629aa5961c7f6a6f5db1363301a1f9dbe25bf554d3431b66f4bf2160e26df0f14e3707d7449b54b7841eecf167511676830d48466e80485c61480150c31ce044c538d20c5ae7c896747123e831426674ff5a0be5e0ede9176bdaec1240b15f15b31fcb4a186d84f11760fb88cd7028e140c2b9ef42bd1d27cd706338cebf16b54fbd8fe9b2aa25770732df864a960112d110f2e03f6215d7105400a4f87dc69a6a4cd3b2412cb87d3f0620391797ea35a2a75cd00"}, &(0x7f0000000240)=0xcf) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$ax25_int(r1, 0x101, 0xf, &(0x7f0000000280)=0x5, 0x4) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r3, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2011.780401] sd 0:0:1:0: [sg0] tag#688 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2011.789383] sd 0:0:1:0: [sg0] tag#688 CDB: opcode=0xe5 (vendor) [ 2011.795576] sd 0:0:1:0: [sg0] tag#688 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2011.804466] sd 0:0:1:0: [sg0] tag#688 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2011.813334] sd 0:0:1:0: [sg0] tag#688 CDB[20]: a0 17:16:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x5460, 0x100002) [ 2011.829844] sd 0:0:1:0: [sg0] tag#729 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2011.838637] sd 0:0:1:0: [sg0] tag#729 CDB: opcode=0xe5 (vendor) [ 2011.845263] sd 0:0:1:0: [sg0] tag#729 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2011.854222] sd 0:0:1:0: [sg0] tag#729 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2011.863143] sd 0:0:1:0: [sg0] tag#729 CDB[20]: a0 17:16:38 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x1000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2011.916423] sd 0:0:1:0: [sg0] tag#754 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2011.925404] sd 0:0:1:0: [sg0] tag#754 CDB: opcode=0xe5 (vendor) [ 2011.931625] sd 0:0:1:0: [sg0] tag#754 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2011.940442] sd 0:0:1:0: [sg0] tag#754 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2011.949376] sd 0:0:1:0: [sg0] tag#754 CDB[20]: a0 17:16:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9201, 0x100002) [ 2011.992548] sd 0:0:1:0: [sg0] tag#688 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2012.001534] sd 0:0:1:0: [sg0] tag#688 CDB: opcode=0xe5 (vendor) [ 2012.007655] sd 0:0:1:0: [sg0] tag#688 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2012.016631] sd 0:0:1:0: [sg0] tag#688 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2012.025507] sd 0:0:1:0: [sg0] tag#688 CDB[20]: a0 17:16:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x100000000000000, 0x0, 0x0}) 17:16:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2012.088703] sd 0:0:1:0: [sg0] tag#758 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2012.097693] sd 0:0:1:0: [sg0] tag#758 CDB: opcode=0xe5 (vendor) [ 2012.103967] sd 0:0:1:0: [sg0] tag#758 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2012.112865] sd 0:0:1:0: [sg0] tag#758 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2012.121785] sd 0:0:1:0: [sg0] tag#758 CDB[20]: a0 17:16:39 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9205, 0x100002) [ 2012.211921] sd 0:0:1:0: [sg0] tag#688 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2012.220909] sd 0:0:1:0: [sg0] tag#688 CDB: opcode=0xe5 (vendor) [ 2012.227042] sd 0:0:1:0: [sg0] tag#688 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2012.235924] sd 0:0:1:0: [sg0] tag#688 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2012.244789] sd 0:0:1:0: [sg0] tag#688 CDB[20]: a0 17:16:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x20000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x500, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:39 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x600, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9208, 0x100002) 17:16:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x100000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x200000000000000, 0x0, 0x0}) 17:16:39 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x700, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x924b, 0x100002) 17:16:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x1f00, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000340)=0x9) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x101300, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000001c0)={r2}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {r3, 0xf}}, 0x10) r4 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_DEBUG(r4, 0x227e, &(0x7f0000000040)) pwritev(r4, &(0x7f0000000180)=[{&(0x7f0000000240)="3850b1d550488d333a8272232269e9aa1b770255ae62fbf2a37aea0de17fb9ee17349ae3a3154eacce4932a89f59ebe8aadd2344b409759a00587df9c8d28bb4bcfd9ab4cc12f4048a1179bda598b851e15624e7d6ff7fa442901b77dfab4434a5411ed4b7284f6f8b21d42cfc6f87caf5c6229ea3c81c014bae98d87fd0b7da7ce236bb805d50b7769a1b0e2530fb2201f2e8d9b3b5a9a73b9d7f51f8394888edff5a4eefd7c5ab404ac4", 0xab}], 0x1, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) 17:16:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x200000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x300000000000000, 0x0, 0x0}) 17:16:39 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x40049409, 0x100002) 17:16:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup(r1) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r0, r1}) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000080), 0x4) 17:16:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x300000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x400000000000000, 0x0, 0x0}) 17:16:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x2000, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x400000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x500000000000000, 0x0, 0x0}) 17:16:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x40086602, 0x100002) 17:16:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x56e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x70}}, 0x810) 17:16:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x4800, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x500000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x40087602, 0x100002) 17:16:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x600000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x600000000000000, 0x0, 0x0}) 17:16:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x4c00, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl(r0, 0x6, &(0x7f0000000040)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x20000, 0x0) pwritev(r1, &(0x7f0000000240)=[{&(0x7f00000001c0)="5740886a310dafbdab340ac683593663e3b96903269b102a268d51d90a7537ed723541adaaf40c77a8fad3b0276fe2da00bcf03bb2737a6fdb5793f4d461c35e", 0x40}], 0x1, 0x0) ioctl$SG_IO(r2, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x30000, 0x0) splice(r4, &(0x7f0000000100), r1, &(0x7f0000000140), 0xffff, 0xa) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000080)=@rose={'rose', 0x0}, 0x10) setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000180)=0x5, 0x4) 17:16:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x5d00, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x700000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x40189206, 0x100002) 17:16:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x700000000000000, 0x0, 0x0}) 17:16:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x4000, &(0x7f0000000100)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@version_9p2000='version=9p2000'}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x76, 0x77, 0x34, 0x62, 0x39, 0x38, 0x7b], 0x2d, [0x34, 0x32, 0x61, 0x39], 0x2d, [0x63, 0x39, 0x0, 0x34], 0x2d, [0x7f, 0x31, 0x66, 0x65], 0x2d, [0x65, 0x0, 0x38, 0x77, 0x73, 0x63, 0x77, 0x79]}}}, {@pcr={'pcr', 0x3d, 0x1c}}]}}) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x6000, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x4018920a, 0x100002) 17:16:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x800000000000000, 0x0, 0x0}) 17:16:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x800000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x4020940d, 0x100002) 17:16:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x6800, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x1f00000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) acct(&(0x7f0000000100)='./file0\x00') ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x80) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f00000000c0)={0x0, @speck128, 0x3, "5e7ade87c6dca5d2"}) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000080)) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000140), &(0x7f0000000240)=0x4) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x35f9, 0x0, 0x0, 0x0}) 17:16:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x1000000000000000, 0x0, 0x0}) 17:16:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x6c00, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x80086601, 0x100002) 17:16:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) [ 2014.199680] audit: type=1804 audit(1556903801.258:151): pid=8519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="file0" dev="sda1" ino=16595 res=1 17:16:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x3f00000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x1f00000000000000, 0x0, 0x0}) [ 2014.264647] [ 2014.266346] ====================================================== [ 2014.269532] kobject: 'loop1' (00000000bae3875e): kobject_uevent_env [ 2014.272693] WARNING: possible circular locking dependency detected [ 2014.272704] 4.19.38 #6 Not tainted [ 2014.272726] ------------------------------------------------------ [ 2014.272733] syz-executor.5/8526 is trying to acquire lock: [ 2014.272741] 000000003ec69a6f (&acct->lock#2){+.+.}, at: acct_pin_kill+0x27/0x100 [ 2014.272784] [ 2014.272784] but task is already holding lock: [ 2014.272788] 00000000b101046d (sb_writers#4){.+.+}, at: mnt_want_write+0x3f/0xc0 [ 2014.272829] [ 2014.272829] which lock already depends on the new lock. [ 2014.272829] [ 2014.279354] kobject: 'loop1' (00000000bae3875e): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2014.285582] [ 2014.285582] the existing dependency chain (in reverse order) is: [ 2014.285589] [ 2014.285589] -> #2 (sb_writers#4){.+.+}: [ 2014.285629] __sb_start_write+0x20b/0x360 [ 2014.285641] mnt_want_write+0x3f/0xc0 17:16:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x80087601, 0x100002) 17:16:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) [ 2014.285721] ovl_want_write+0x76/0xa0 [ 2014.285741] ovl_link+0x7c/0x2d5 [ 2014.322946] kobject: 'loop0' (00000000da7af952): kobject_uevent_env [ 2014.330653] vfs_link+0x7a4/0xb60 [ 2014.330665] do_linkat+0x550/0x770 [ 2014.330676] __x64_sys_link+0x61/0x80 [ 2014.330689] do_syscall_64+0x103/0x610 [ 2014.330704] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2014.330709] [ 2014.330709] -> #1 ( [ 2014.375444] kobject: 'loop0' (00000000da7af952): fill_kobj_path: path = '/devices/virtual/block/loop0' 17:16:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x4800000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x2000000000000000, 0x0, 0x0}) [ 2014.376934] &ovl_i_mutex_key[depth]){+.+.}: [ 2014.376965] down_write+0x38/0x90 [ 2014.376987] ovl_write_iter+0x148/0xc20 [ 2014.417585] kobject: 'loop3' (00000000ab984372): kobject_uevent_env [ 2014.420977] __vfs_write+0x58e/0x820 [ 2014.420996] __kernel_write+0x110/0x390 [ 2014.440646] do_acct_process+0xd37/0x1150 [ 2014.445364] acct_process+0x568/0x61e [ 2014.449715] do_exit+0x17c0/0x2fa0 [ 2014.453796] do_group_exit+0x135/0x370 [ 2014.457756] kobject: 'loop3' (00000000ab984372): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2014.458228] get_signal+0x399/0x1d50 [ 2014.472057] do_signal+0x95/0x1950 [ 2014.476239] exit_to_usermode_loop+0x244/0x2c0 [ 2014.481366] do_syscall_64+0x52d/0x610 [ 2014.485808] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2014.491529] [ 2014.491529] -> #0 (&acct->lock#2){+.+.}: [ 2014.497115] lock_acquire+0x16f/0x3f0 [ 2014.501484] __mutex_lock+0xf7/0x1300 [ 2014.505820] mutex_lock_nested+0x16/0x20 [ 2014.510417] acct_pin_kill+0x27/0x100 17:16:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x80089203, 0x100002) [ 2014.514776] pin_kill+0x18f/0x860 [ 2014.516862] kobject: 'loop1' (00000000bae3875e): kobject_uevent_env [ 2014.518761] acct_on+0x574/0x790 [ 2014.518773] __x64_sys_acct+0xae/0x200 [ 2014.518794] do_syscall_64+0x103/0x610 [ 2014.538084] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2014.543798] [ 2014.543798] other info that might help us debug this: [ 2014.543798] [ 2014.551963] Chain exists of: [ 2014.551963] &acct->lock#2 --> &ovl_i_mutex_key[depth] --> sb_writers#4 [ 2014.551963] [ 2014.563208] Possible unsafe locking scenario: [ 2014.563208] [ 2014.569299] CPU0 CPU1 [ 2014.573979] ---- ---- [ 2014.574618] kobject: 'loop1' (00000000bae3875e): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2014.578643] lock(sb_writers#4); [ 2014.578658] lock(&ovl_i_mutex_key[depth]); [ 2014.578677] lock(sb_writers#4); [ 2014.604503] lock(&acct->lock#2); [ 2014.608068] [ 2014.608068] *** DEADLOCK *** [ 2014.608068] [ 2014.614148] 2 locks held by syz-executor.5/8526: [ 2014.618919] #0: 00000000fe97250e (acct_on_mutex){+.+.}, at: __x64_sys_acct+0xa6/0x200 [ 2014.627029] #1: 00000000b101046d (sb_writers#4){.+.+}, at: mnt_want_write+0x3f/0xc0 [ 2014.628040] kobject: 'loop1' (00000000bae3875e): kobject_uevent_env [ 2014.635000] [ 2014.635000] stack backtrace: [ 2014.635019] CPU: 1 PID: 8526 Comm: syz-executor.5 Not tainted 4.19.38 #6 [ 2014.635025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2014.635029] Call Trace: [ 2014.635053] dump_stack+0x172/0x1f0 [ 2014.635072] print_circular_bug.isra.0.cold+0x1cc/0x28f [ 2014.635094] __lock_acquire+0x2e6d/0x48f0 [ 2014.655798] kobject: 'loop1' (00000000bae3875e): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2014.662247] ? mark_held_locks+0x100/0x100 [ 2014.662266] ? __lock_is_held+0xb6/0x140 [ 2014.662279] ? save_trace+0xe0/0x290 [ 2014.662311] ? acct_pin_kill+0x27/0x100 [ 2014.665573] kobject: 'loop0' (00000000da7af952): kobject_uevent_env [ 2014.668549] lock_acquire+0x16f/0x3f0 [ 2014.668564] ? acct_pin_kill+0x27/0x100 [ 2014.668581] ? acct_pin_kill+0x27/0x100 [ 2014.674118] kobject: 'loop0' (00000000da7af952): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2014.678124] __mutex_lock+0xf7/0x1300 [ 2014.678139] ? acct_pin_kill+0x27/0x100 [ 2014.678155] ? mark_held_locks+0x100/0x100 [ 2014.678174] ? __lock_acquire+0x6eb/0x48f0 [ 2014.688585] kobject: 'loop3' (00000000ab984372): kobject_uevent_env [ 2014.691969] ? acct_pin_kill+0x27/0x100 [ 2014.691986] ? mutex_trylock+0x1e0/0x1e0 [ 2014.691998] ? pin_kill+0x121/0x860 [ 2014.692008] ? pin_kill+0x13b/0x860 [ 2014.692030] ? find_held_lock+0x35/0x130 [ 2014.696212] kobject: 'loop3' (00000000ab984372): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2014.699912] ? pin_kill+0x13b/0x860 [ 2014.699929] ? mark_held_locks+0xb1/0x100 [ 2014.699950] mutex_lock_nested+0x16/0x20 [ 2014.734811] audit: type=1804 audit(1556903801.328:152): pid=8519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="file0" dev="sda1" ino=16595 res=1 [ 2014.736471] ? mutex_lock_nested+0x16/0x20 [ 2014.736494] acct_pin_kill+0x27/0x100 [ 2014.826770] pin_kill+0x18f/0x860 [ 2014.830268] ? pin_insert+0x60/0x60 [ 2014.833926] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 2014.838770] ? finish_wait+0x260/0x260 [ 2014.842661] acct_on+0x574/0x790 [ 2014.846028] __x64_sys_acct+0xae/0x200 [ 2014.849975] do_syscall_64+0x103/0x610 [ 2014.853868] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2014.859054] RIP: 0033:0x458da9 [ 2014.862251] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2014.881218] RSP: 002b:00007f6339194c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 2014.888931] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000458da9 [ 2014.896206] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 2014.903476] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 17:16:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x100400, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) ptrace$getenv(0x4201, r2, 0x37, &(0x7f0000000080)) 17:16:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4800000000000000, 0x0, 0x0}) 17:16:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x4c00000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xc0045878, 0x100002) 17:16:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x7000, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2014.910751] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f63391956d4 [ 2014.918041] R13: 00000000004becd2 R14: 00000000004cfa50 R15: 00000000ffffffff [ 2014.930507] Process accounting resumed [ 2014.942850] Process accounting resumed 17:16:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xc0045878, 0x100002) 17:16:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x6800000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x7400, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4c00000000000000, 0x0, 0x0}) [ 2015.010227] kobject: 'loop3' (00000000ab984372): kobject_uevent_env [ 2015.028608] kobject: 'loop3' (00000000ab984372): fill_kobj_path: path = '/devices/virtual/block/loop3' 17:16:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f53d070") r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x2, 0x0) r2 = getuid() ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000980)) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f00000006c0)=0xe8) mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='fuseblk\x00', 0x1, &(0x7f0000000700)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0xd2d5}}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}], [{@uid_gt={'uid>', r4}}, {@euid_gt={'euid>', r5}}, {@uid_eq={'uid', 0x3d, r6}}, {@euid_lt={'euid<', r7}}, {@permit_directio='permit_directio'}, {@context={'context', 0x3d, 'user_u'}}, {@appraise='appraise'}, {@dont_appraise='dont_appraise'}]}}) r8 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) renameat(r8, &(0x7f0000000900)='./file0\x00', r1, &(0x7f0000000940)='./file0\x00') ioctl$GIO_UNIMAP(r8, 0x4b66, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {}, {}]}) r9 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$VIDIOC_S_CROP(r8, 0x4014563c, &(0x7f0000000100)={0xf, {0x8000, 0x3, 0x3}}) ioctl$SG_IO(r9, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xc0109207, 0x100002) 17:16:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x6000000000000000, 0x0, 0x0}) 17:16:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) [ 2015.080567] kobject: 'loop2' (000000007a038117): kobject_uevent_env [ 2015.096996] kobject: 'loop2' (000000007a038117): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2015.117956] kobject: 'loop4' (000000005f4bb802): kobject_uevent_env 17:16:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x6c00000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x7a00, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2015.160486] kobject: 'loop4' (000000005f4bb802): fill_kobj_path: path = '/devices/virtual/block/loop4' 17:16:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xc0189436, 0x100002) 17:16:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x9, 0xfff, 0x8, 0x600000000000000}, {0x5ad, 0x6, 0x6, 0x2}, {0x7, 0x535, 0x62, 0x89}, {0x8001, 0x8000, 0x0, 0xfff}]}, 0x10) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x6800000000000000, 0x0, 0x0}) 17:16:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x200000, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2015.203434] kobject: 'loop1' (00000000bae3875e): kobject_uevent_env [ 2015.231966] kobject: 'loop1' (00000000bae3875e): fill_kobj_path: path = '/devices/virtual/block/loop1' 17:16:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x7000000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2015.276471] kobject: 'loop0' (00000000da7af952): kobject_uevent_env [ 2015.300849] kobject: 'loop0' (00000000da7af952): fill_kobj_path: path = '/devices/virtual/block/loop0' 17:16:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xc020660b, 0x100002) 17:16:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x2, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x2000, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f00000000c0)={{0x0, @name="33854a45b240a74808d5c59d8250048eb5765a799809fce3d31777ba9c7bf22d"}, "dbdc86793ba8459a9a26ea9ebdafcb71c71df34288d95c1a6ce09407a2ded0f2", 0x2}) [ 2015.331642] kobject: 'loop0' (00000000da7af952): kobject_uevent_env [ 2015.353933] kobject: 'loop0' (00000000da7af952): fill_kobj_path: path = '/devices/virtual/block/loop0' 17:16:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x1000000, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x7400000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x6c00000000000000, 0x0, 0x0}) [ 2015.376593] kobject: 'loop3' (00000000ab984372): kobject_uevent_env [ 2015.384632] kobject: 'loop3' (00000000ab984372): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2015.415897] kobject: 'loop1' (00000000bae3875e): kobject_uevent_env 17:16:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x10004b) 17:16:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x2000000, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x7000000000000000, 0x0, 0x0}) [ 2015.447795] kobject: 'loop1' (00000000bae3875e): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2015.487360] kobject: 'loop4' (000000005f4bb802): kobject_uevent_env 17:16:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x7a00000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40040, 0x90) ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000140)={0x9, 0x0, [], {0x0, @bt={0x9, 0x7fff, 0x1, 0x2, 0x1, 0x7, 0x5, 0x8, 0x8, 0x1, 0x4, 0x5, 0x1, 0x100000000000, 0x4, 0x1}}}) ioctl(r1, 0xa278, &(0x7f0000000040)="201d9d9aa4dcd5869face6c73ce89188f7ccfc3fee9a6df6b02a4996f2ad559d6bb1d7f0d49bf80f5e87498cb9e002828462bcfc89158da332d4f6c8cc82fd829fcb25e5c207403e0bd2b302d1f311904d381eb0e2167b5b0ffffca77781cc74c3c02387") ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x422b40, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) sync_file_range(r1, 0x3, 0x1f, 0x3) 17:16:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000040)) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000040)=""/205) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0x1000, 0x7ff}) [ 2015.503312] kobject: 'loop4' (000000005f4bb802): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2015.528199] kobject: 'loop3' (00000000ab984372): kobject_uevent_env 17:16:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x3000000, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x7400000000000000, 0x0, 0x0}) [ 2015.563115] kobject: 'loop3' (00000000ab984372): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2015.595042] kobject: 'loop0' (00000000da7af952): kobject_uevent_env [ 2015.603663] kobject: 'loop0' (00000000da7af952): fill_kobj_path: path = '/devices/virtual/block/loop0' 17:16:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0xac00000000000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2015.624055] kobject: 'loop4' (000000005f4bb802): kobject_uevent_env [ 2015.647915] kobject: 'loop4' (000000005f4bb802): fill_kobj_path: path = '/devices/virtual/block/loop4' 17:16:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f00000002c0)=[0xffffffffffffffff, 0x0, 0xee00, 0xffffffffffffffff, 0xee01, 0xee00]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getgid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) r11 = getegid() getresuid(&(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)=0x0) fstat(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000800)={0x3f0, 0x0, 0x8, [{{0x1, 0x3, 0x1, 0x100000000, 0x841, 0x1, {0x4, 0xfffffffffffffff8, 0x81, 0x7, 0x200, 0x4, 0x7fff, 0x6, 0x5, 0xffff, 0x0, r2, r3, 0x1, 0x8}}, {0x3, 0xd43, 0x9, 0x9, '/dev/sg#\x00'}}, {{0x5, 0x0, 0x1, 0x3, 0x7, 0x5, {0x5, 0x3, 0x2, 0x2, 0x2, 0x3, 0x7, 0x6, 0x0, 0x9, 0x8, r4, r5, 0x5, 0x8001}}, {0x5, 0xffffffff80000000, 0x9, 0x1, '/dev/sg#\x00'}}, {{0x1, 0x3, 0x1, 0x4, 0x9, 0x2, {0x1, 0x274e, 0x3, 0x9, 0x6, 0x9, 0x9, 0xffff, 0x0, 0x4, 0xf61, r6, r7, 0x0, 0x10001}}, {0x6, 0xfffffffffffffe00, 0x9, 0x3f, '/dev/sg#\x00'}}, {{0x1, 0x1, 0xfffffffffffffffa, 0x8, 0x7fff, 0x3ff, {0x4, 0x9, 0x8000, 0x6, 0x3, 0x7, 0xe9, 0xec, 0x6, 0xffffffff, 0x9, r8, r9, 0x3ff, 0xffffffffffffffff}}, {0x6, 0x3, 0x9, 0x4, '/dev/sg#\x00'}}, {{0x0, 0x2, 0x3, 0x2, 0x80000000, 0xffffffff7fffffff, {0x3, 0x40, 0x1, 0x9, 0x9916, 0xffffffff80000000, 0x6, 0x480000000000000, 0x1ff, 0x5, 0x8, r10, r11, 0x3, 0x3ff}}, {0x4, 0xbb3, 0x4, 0x51, 'ppp1'}}, {{0x0, 0x3, 0x2, 0x6, 0x1, 0x0, {0x0, 0x8001, 0x5, 0x9, 0x0, 0xd3ab, 0x1, 0x1, 0xf7, 0x59904161, 0x7fffffff, r12, r13, 0x2, 0x1}}, {0x5, 0x8, 0x4, 0x8, 'self'}}]}, 0x3f0) 17:16:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x7a00000000000000, 0x0, 0x0}) 17:16:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x4, 0x800, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000013c0)=0x5, &(0x7f0000001400)=0x4) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x20040, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001300)={0x53, 0x0, 0xfd, 0x74d5, @buffer={0x0, 0x1000, &(0x7f0000000140)=""/4096}, &(0x7f0000001140)="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", &(0x7f0000001240)=""/91, 0x401, 0x10003, 0x3, &(0x7f00000012c0)}) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0x9204, 0x100002) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) 17:16:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x4000000, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2015.669575] kobject: 'loop1' (00000000bae3875e): kobject_uevent_env 17:16:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0xfc00000000000000, 0x0, 0x0}) 17:16:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0xfeffffff00000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) [ 2015.703408] kobject: 'loop1' (00000000bae3875e): fill_kobj_path: path = '/devices/virtual/block/loop1' 17:16:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x10100002) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={r2, r3, r4}, 0xc) 17:16:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0xfeffffff00000000, 0x0, 0x0}) [ 2015.764162] kobject: 'loop3' (00000000ab984372): kobject_uevent_env [ 2015.792051] kobject: 'loop3' (00000000ab984372): fill_kobj_path: path = '/devices/virtual/block/loop3' 17:16:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x5000000, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r0, r0, 0xd654cfab1b895ffa) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0xf2, 0x7, 0x80000, 0x3}, {0xab, 0x9, 0xd9, 0x5}, {0x3, 0x6, 0x5, 0x400}, {0xffffffffffffff00, 0x2, 0x800, 0x8}]}) fchdir(r1) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x1) 17:16:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0xffffff0f00000000, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2015.824829] kobject: 'loop0' (00000000da7af952): kobject_uevent_env [ 2015.861590] kobject: 'loop0' (00000000da7af952): fill_kobj_path: path = '/devices/virtual/block/loop0' 17:16:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl(r1, 0x3, &(0x7f0000000040)="8b0e598ab7863358359fb30bfa2ae1b39e4ddc0f801d3a7c95462d901c93eb9c9789eb8e662438df3dba20242ff17b8330332740bbeed43740c7ac0a79307187c882233c1746f6318daab1567e748ac1e43223112effff0ecf9c64bcb7b7bb5f397b4582988ed80128d64ce64679cf8235615c26f06ca83c84b6f5b96778830f32bba4273143b8fe80d2d3") ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) [ 2015.874425] kobject: 'loop1' (00000000bae3875e): kobject_uevent_env [ 2015.884076] kobject: 'loop1' (00000000bae3875e): fill_kobj_path: path = '/devices/virtual/block/loop1' 17:16:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0xffffff0f00000000, 0x0, 0x0}) 17:16:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) openat$cgroup_ro(r2, &(0x7f0000000140)='cgroup.events\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000180)={0x0, 0xfffffffffffffffb, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000080)={0x5, [0x9, 0x1ff, 0xfffffffffffff939, 0x7, 0x6]}, &(0x7f00000000c0)=0xe) 17:16:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x6000000, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0xffffffffffffffff, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2015.941400] kobject: 'loop2' (000000007a038117): kobject_uevent_env [ 2015.947905] kobject: 'loop2' (000000007a038117): fill_kobj_path: path = '/devices/virtual/block/loop2' 17:16:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0xff, 0x3ffe) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000040)=""/1) 17:16:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0xffffff7f00000000, 0x0, 0x0}) [ 2015.987581] kobject: 'loop3' (00000000ab984372): kobject_uevent_env [ 2016.006559] kobject: 'loop3' (00000000ab984372): fill_kobj_path: path = '/devices/virtual/block/loop3' 17:16:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x30, @buffer={0x0, 0xc7, &(0x7f0000000480)=""/199}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x3, 0x2203) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x66, 0x20, 0xff, 0x8}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000140)={r2, 0x10000}, &(0x7f0000000180)=0x8) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000040)={'gretap0\x00', {0x2, 0x4e22, @broadcast}}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x102, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0x9204, 0x100002) 17:16:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x7000000, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2016.048418] kobject: 'loop0' (00000000da7af952): kobject_uevent_env [ 2016.068630] kobject: 'loop0' (00000000da7af952): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2016.089412] kobject: 'loop2' (000000007a038117): kobject_uevent_env 17:16:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 2016.126427] kobject: 'loop2' (000000007a038117): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2016.152423] kobject: 'loop1' (00000000bae3875e): kobject_uevent_env 17:16:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x40, 0x0) write$selinux_user(r2, &(0x7f0000000080)={'system_u:object_r:syslogd_initrc_exec_t:s0', 0x20, 'system_u\x00'}, 0x34) 17:16:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x800, 0x81ffe) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000380)={{0x5, 0x1, 0xffffffffffffff81, 0x5, 'syz1\x00', 0xc2}, 0x1, 0x8, 0x0, r3, 0x9, 0x4, 'syz1\x00', &(0x7f0000000100)=['system&\x00', 'keyringposix_acl_accessem1mime_typecpuset\x00', '-eth1vboxnet1\'\\@-\x00', '/dev/sg#\x00', '/dev/amidi#\x00', '/dev/sg#\x00', 'vmnet1/\x8d\']]vboxnet1eth0trustedprocppp1@\x00', 'wlan1\x00', '/dev/amidi#\x00'], 0x9c, [], [0x9, 0x0, 0x1f, 0x1]}) ioctl$SG_IO(r2, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x8000000, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2016.182245] kobject: 'loop1' (00000000bae3875e): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2016.221953] kobject: 'loop0' (00000000da7af952): kobject_uevent_env 17:16:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x3, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2016.238627] kobject: 'loop0' (00000000da7af952): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2016.254812] kobject: 'loop1' (00000000bae3875e): kobject_uevent_env 17:16:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x2, 0x0}) 17:16:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x44c000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x100000001, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f0000000080), r2, 0x1}}, 0x18) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0x9204, 0x100002) 17:16:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x4002) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x200000) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2016.286279] kobject: 'loop1' (00000000bae3875e): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2016.314366] kobject: 'loop3' (00000000ab984372): kobject_uevent_env [ 2016.325365] kobject: 'loop3' (00000000ab984372): fill_kobj_path: path = '/devices/virtual/block/loop3' 17:16:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0xfffffff, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x4, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2016.349470] kobject: 'loop0' (00000000da7af952): kobject_uevent_env [ 2016.363946] kobject: 'loop0' (00000000da7af952): fill_kobj_path: path = '/devices/virtual/block/loop0' 17:16:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x3, 0x0}) 17:16:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008914, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) [ 2016.391435] kobject: 'loop2' (000000007a038117): kobject_uevent_env [ 2016.397940] kobject: 'loop2' (000000007a038117): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2016.426828] kobject: 'loop0' (00000000da7af952): kobject_uevent_env [ 2016.433508] scsi_io_completion_action: 98 callbacks suppressed 17:16:43 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f00000000c0)={0x4ab5, "93e0ca9f79642e92082a677ef1dfffda6ebb3c88a567ae628708e57bbe95466d", 0x0, 0x1}) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000080)=0x401) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x5, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2016.433543] sd 0:0:1:0: [sg0] tag#910 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2016.448760] sd 0:0:1:0: [sg0] tag#910 CDB: opcode=0xe5 (vendor) [ 2016.454910] sd 0:0:1:0: [sg0] tag#910 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2016.463762] sd 0:0:1:0: [sg0] tag#910 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2016.472777] sd 0:0:1:0: [sg0] tag#910 CDB[20]: a0 17:16:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) [ 2016.494776] sd 0:0:1:0: [sg0] tag#855 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2016.503686] sd 0:0:1:0: [sg0] tag#855 CDB: opcode=0xe5 (vendor) [ 2016.509797] sd 0:0:1:0: [sg0] tag#855 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2016.518678] sd 0:0:1:0: [sg0] tag#855 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2016.527526] sd 0:0:1:0: [sg0] tag#855 CDB[20]: a0 [ 2016.536812] sd 0:0:1:0: [sg0] tag#918 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2016.537416] kobject: 'loop0' (00000000da7af952): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2016.545722] sd 0:0:1:0: [sg0] tag#918 CDB: opcode=0xe5 (vendor) [ 2016.561322] sd 0:0:1:0: [sg0] tag#918 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2016.570126] sd 0:0:1:0: [sg0] tag#918 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2016.575965] kobject: 'loop1' (00000000bae3875e): kobject_uevent_env [ 2016.578946] sd 0:0:1:0: [sg0] tag#918 CDB[20]: a0 17:16:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f00000000c0)) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000040)={0x3, 0x1, [0x9, 0x63ea000000000000, 0xe7e8, 0x9000, 0x81, 0x7, 0xe6b, 0x4]}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xfffffffffffffffd, 0x101000) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) [ 2016.595556] kobject: 'loop1' (00000000bae3875e): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2016.624576] kobject: 'loop3' (00000000ab984372): kobject_uevent_env 17:16:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x4, 0x0}) [ 2016.664881] kobject: 'loop3' (00000000ab984372): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2016.690624] sd 0:0:1:0: [sg0] tag#855 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2016.699560] sd 0:0:1:0: [sg0] tag#855 CDB: opcode=0xe5 (vendor) [ 2016.705735] sd 0:0:1:0: [sg0] tag#855 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 17:16:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x1f000000, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffff96, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0}) ioctl(r0, 0xed, &(0x7f00000000c0)="fee602d7a1d6fdd4285d1ed331804cc33a353511163dd926103c10d955be78a59a22acc9bc528e5cb35e28") 17:16:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x6, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, 0x0) 17:16:43 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9204, 0x100002) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000040)={0x2, 0x9, "ba3e481d6d650bab1bc1577b401adc9a90969a697ecb2447ba3373be0a1085c2", 0x5, 0x8000, 0x1000000000, 0x3, 0x1}) [ 2016.714589] sd 0:0:1:0: [sg0] tag#855 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2016.723448] sd 0:0:1:0: [sg0] tag#855 CDB[20]: a0 [ 2016.729587] kobject: 'loop0' (00000000da7af952): kobject_uevent_env [ 2016.737415] kobject: 'loop0' (00000000da7af952): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2016.781097] kobject: 'loop2' (000000007a038117): kobject_uevent_env [ 2016.795717] sd 0:0:1:0: [sg0] tag#918 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2016.800783] kobject: 'loop2' (000000007a038117): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2016.804608] sd 0:0:1:0: [sg0] tag#918 CDB: opcode=0xe5 (vendor) [ 2016.820250] sd 0:0:1:0: [sg0] tag#918 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 17:16:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, 0x0) 17:16:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x5, 0x0}) [ 2016.829105] sd 0:0:1:0: [sg0] tag#918 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2016.837955] sd 0:0:1:0: [sg0] tag#918 CDB[20]: a0 [ 2016.857362] sd 0:0:1:0: [sg0] tag#861 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2016.866165] sd 0:0:1:0: [sg0] tag#861 CDB: opcode=0xe5 (vendor) [ 2016.870538] sd 0:0:1:0: [sg0] tag#918 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2016.872422] sd 0:0:1:0: [sg0] tag#861 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2016.872442] sd 0:0:1:0: [sg0] tag#861 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2016.872466] sd 0:0:1:0: [sg0] tag#861 CDB[20]: a0 [ 2016.881148] sd 0:0:1:0: [sg0] tag#918 CDB: opcode=0xe5 (vendor) [ 2016.903878] kobject: 'loop4' (000000005f4bb802): kobject_uevent_env [ 2016.909928] sd 0:0:1:0: [sg0] tag#918 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 17:16:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) pipe2(&(0x7f0000000080), 0x84800) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xfffffffffffffffa, 0xa600) ioctl$NBD_DISCONNECT(r2, 0xab08) 17:16:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x201) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, 0x0) [ 2016.925238] sd 0:0:1:0: [sg0] tag#918 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2016.934074] sd 0:0:1:0: [sg0] tag#918 CDB[20]: a0 [ 2016.942676] kobject: 'loop4' (000000005f4bb802): fill_kobj_path: path = '/devices/virtual/block/loop4' 17:16:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x20000000, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2016.983563] kobject: 'loop3' (00000000ab984372): kobject_uevent_env [ 2016.994500] kobject: 'loop3' (00000000ab984372): fill_kobj_path: path = '/devices/virtual/block/loop3' 17:16:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 17:16:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x6, 0x0}) 17:16:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) [ 2017.024863] kobject: 'loop2' (000000007a038117): kobject_uevent_env [ 2017.046882] kobject: 'loop2' (000000007a038117): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2017.059360] sd 0:0:1:0: [sg0] tag#861 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2017.064796] kobject: 'loop0' (00000000da7af952): kobject_uevent_env [ 2017.068124] sd 0:0:1:0: [sg0] tag#861 CDB: opcode=0xe5 (vendor) [ 2017.076437] kobject: 'loop0' (00000000da7af952): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2017.080641] sd 0:0:1:0: [sg0] tag#861 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2017.080703] sd 0:0:1:0: [sg0] tag#861 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2017.080717] sd 0:0:1:0: [sg0] tag#861 CDB[20]: a0 [ 2017.111762] sd 0:0:1:0: [sg0] tag#861 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK 17:16:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x7, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="2c2864154921de980973a37d0864052c3d5a121e13869efe052f3daf912f3b94f43abc592414a2fae62bdc746e322c5be0da8c7604fd6f8992f494c507b08b1bca197f4f43a7b11caa1f910307e57e665a57142cda98a107df5eec84628faf98ce4b54356bcb9b9f", 0x68}, {&(0x7f0000000100)="cf8d6e2ffa96e3a0dce0daff55feaa1ef9f8cb1ae1c741c0022a3933898f69e0e1916b18c8d81e675af754a73803b2c41b9983842ceac74bbd840cd91d21ddc94da01558dca0b3d051dd3612b83dfb700b6d0645bab1966cdbeb0665b67b244d4d2f4629ecf49802735fbb7b53c870168b8e502f90d1f102d9899aa3d1b53bf7e0a37f0cb436810f3faa74", 0x8b}, {&(0x7f0000000380)="d49c50daf497bf1a4299f2adc6d714ebd079687443f8f53fb66c3d6a068713cbc6680f01ff83047f52af22021bff427a773a7137a2be6e2c881b86f89e79d08cee5544f360122b354f95c8fea9641dec19fc7a41c645d189cb54114d1eaa76960c6124b37996e30ac83a095cc9c5bcb9f6e35a8dc1c2141143735170149b421213cd9793d06ded0ea01e66301a3950dca398e8901a6d5448b32d39a4d4edfce87faab1c9b9aee4755977bd25056d45594c9d1e90de75ae0139cf7e75aecb5f7b199c44496a0aea4803418d15c3d683", 0xcf}, {&(0x7f0000000240)="ad307ec13bfecbe7a86764bacbf5adfd2468d3b2dff8fba848098bb96255a012ec8862788cafa42383254dd4d907c65235b9ca9048c50fd6cdb84f0fca0a9890eede37a7f6e768ea6ba40e0453cd6ca4d6671980b3ee", 0x56}], 0x4, &(0x7f0000000480)=[{0x78, 0x110, 0x8001, "c570801b93ec039b3e4c90ea296cb6a8fd503eafc11a0c8a9e740488200d52795ebcb548fee9d29b44a9bd23eb67712e71faede09e322cb6b4ea3a8a6a88b8a6d33e1de64d90fbc8caebf7a6748ac955b64fcd9c9866130e826dee883bcabf2b4dc89a1723"}, {0xb0, 0x107, 0x4, "1b35376ec70371e155f0981b7a82b2964720093b8a855155c70c4da346d0ffae3f7743f9556f3a4a104d1cdb07e82ab37865a1cee9e021671519d42e5b684e794b60887dbfce12e29bed4935d68e8e90819b8afe60559f9cb0c4bc141abcac700d8f6354fa62a88fff6bf6b6d014f24b11a630fc9561b303ca084dc67ba4fef523f2598d5443d5720ac480781bbad31d9005754bf144b4fa9c"}, {0x10, 0x0, 0x3f}, {0xf0, 0x19b, 0x6, "7e5f7e5a36c26a5a7210546315a51194a156a7f5c4c0e686152226982e60666d28662a4ba5b940817a524a8b6a0bbd2526ed3fe9688f3d42422668dd174837823e6a549536dfe49b70c2327c9cddea619d5e6316ccc8bd90e541ebab66deedbf03c3d851908bcb87a47d9e362c2d2b2ad17593e21b1a83c64487a15ec1715488866da7e04ee6526030a89e7bfb20667341ed4f103ca165f678c744f869e7a0a83caaf872e6cf97d6c9e08758483f6511e4751d7ba40af51d08b1394d8be5bb909c2379d7565b5ee70f53155d5d55fcef333e237677d94e45bc1c28d57cb6"}, {0xe0, 0x109, 0xffffffffcb8981b2, "70fe71f33a4d40b4febf253be045528b80e9dbdaf67ff30168dc18cc792a5838c130ee552c36aa468d75f303ff339abc9cf9fc8bc14c03c914b3f3b9f98db1af13553d7da64a6161711db3dc140d34cfd12da641802bec04cd8ad32c4fd593bf4688c0ee2c6ea1c17d589ff9e340ce153ba716e55c4ce8680c664d092c531c9450e7ace4610b7e4640b6c22fe826eed2016947b8c323dde4e56fbdeafc2b271627a35523050df35d68bf4fb9e4693b266e2e0e5810b3b0df6daa67e267dd139f1f0e70401cdac7d768b3504c931ea0"}, {0xc8, 0x116, 0x1, "589964d9b1e78c0229b5e60c5ec4e7a4783aeef77ec8d5c2f7cad813608a8b91ae7da1246ba221dc3fdcb0f387de4627760b91bc05d0a4425a6f5ec792d6fd047112d9e2e85052e1eed5e43d82867f5ef71fac2cbfc43cff69bec64f093001b29354f09701f4578d162a4d3f613356c84a8ccfad8c161eb7255e468232a1e6cae69b1070cc27016e0588a000e7aebbc15548ce44baf74eff9ec5e73e4862310c1bf069f45cf8e6e0a9ddfdbeda210dceef"}, {0x20, 0x11d, 0x41, "ba5332abf8275787a22cb31b"}], 0x3f0}, 0x4008040) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x111040, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchdir(r0) [ 2017.121729] sd 0:0:1:0: [sg0] tag#861 CDB: opcode=0xe5 (vendor) [ 2017.127850] sd 0:0:1:0: [sg0] tag#861 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2017.133574] kobject: 'loop4' (000000005f4bb802): kobject_uevent_env [ 2017.136782] sd 0:0:1:0: [sg0] tag#861 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2017.152496] sd 0:0:1:0: [sg0] tag#861 CDB[20]: a0 [ 2017.158138] kobject: 'loop4' (000000005f4bb802): fill_kobj_path: path = '/devices/virtual/block/loop4' 17:16:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002640)='/dev/dlm_plock\x00', 0x40, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000027c0)={0xffffffffffffff9c, 0x10, &(0x7f0000002780)={&(0x7f00000026c0)=""/156, 0x9c, 0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002840)={r1, 0x10, &(0x7f0000002800)={&(0x7f0000002680)=""/21, 0x15, r2}}, 0x10) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x101400, 0x0) write$FUSE_LSEEK(r3, &(0x7f0000000080)={0x18, 0x0, 0x8, {0xff}}, 0x18) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r4 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) pipe2(&(0x7f0000002880), 0x4800) clock_gettime(0x0, &(0x7f00000025c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002580)=[{{&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/237, 0xed}, {&(0x7f0000000140)=""/58, 0x3a}, {&(0x7f0000001480)=""/227, 0xe3}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f0000001580)=""/4096, 0x1000}], 0x6, &(0x7f00000002c0)=""/36, 0x1e}, 0x4}], 0x1, 0x2, &(0x7f0000002600)={r5, r6+30000000}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000002900)={0x9, 0x2, 0x6, 0x0, 0x0, [], [], [], 0x9, 0x6}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000002a40)={'nat\x00', 0x2, [{}, {}]}, 0x48) open(&(0x7f00000028c0)='./file0\x00', 0x40000, 0x102) ioctl$SG_IO(r4, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$setflags(r4, 0x2, 0x1) 17:16:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x7, 0x0}) 17:16:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x8000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000280)=0x9, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200000, 0x0) lsetxattr$security_ima(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="040cc0dae91bdaadb2ce50478e56c0363f38a871cb2a167ba50f2eb809cffae1eb891a9275b8b055301ae96d3d867a0c8419f9c41bf662d66c2b0e415cafa1d0164c9f46b6108636b89a513ccb0ebaeed824b0aa6549fb43a2e2c53200008000000000001ef1d743261c6a2b5ffb959800"/127], 0xa, 0x3) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000100)="2e7c8ee67af468a06088ce82d68ee4e50c2d9bcb94aaf95daeac758888c53a32f331b646628e51db2b62dd6ba5f74aab8fd11bbc42ad94758e9eaaafc4a94017a8b1ba7a4f5d4ce47cc7e0a079255839e648c9c653594c1bfcabb09bedf6ce67a670d0aadde2f9243542af3f46e07657caa1ad338e7790f61559ee8dbf7bfb54aad7506900fc7a48046feafda5428ecf156383a8b738a7e86fd9423f9b6b72cccfe0c2812ca062f1c1b468f8c2a530f73c22") 17:16:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x48000000, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2017.172841] sd 0:0:1:0: [sg0] tag#929 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 2017.181712] sd 0:0:1:0: [sg0] tag#929 CDB: opcode=0xe5 (vendor) [ 2017.187818] sd 0:0:1:0: [sg0] tag#929 CDB[00]: e5 bb b6 66 61 48 5f e8 40 19 c8 ea f7 20 f5 c0 [ 2017.196663] sd 0:0:1:0: [sg0] tag#929 CDB[10]: 94 b9 53 3c 7b a6 a5 2a ec ed 19 9d 46 74 ba 86 [ 2017.205610] sd 0:0:1:0: [sg0] tag#929 CDB[20]: a0 17:16:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) [ 2017.242831] kobject: 'loop3' (00000000ab984372): kobject_uevent_env [ 2017.263570] kobject: 'loop3' (00000000ab984372): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2017.281797] kobject: 'loop2' (000000007a038117): kobject_uevent_env 17:16:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000008}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x120, 0x70bd2a, 0x25dfdbfd, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x4}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r4, 0x300, 0x70bd2d, 0x25dfdbff, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0xd, 0x792, @udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100000890b, &(0x7f0000000140)="7dffffff3c123f319bd0702245f0797eb094520ceb637a183df72dd091d085af8b9cfbf41607998117b4116cf901fe919b35f0fe24cb5b0351b445f32bb11d7dd940d6ed817a11666c70b667b34f31f125980d5ead467f734735d06b10d6227da1477d9a94e82c79832cdd3d25131d07d679d95ba9a9cf6f0a5dbc7ae283e67e000e89f07b00cb1a20a61efb6df076c6417f5d62cb3d544c05bc2d096c6ecd1e1b4b410a2479fffa51eb59007c3c3ce198b98eb122638a532c394bc3f0ac42424d01653880") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x8, 0x0}) [ 2017.289720] kobject: 'loop2' (000000007a038117): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2017.319237] kobject: 'loop0' (00000000da7af952): kobject_uevent_env [ 2017.333045] kobject: 'loop0' (00000000da7af952): fill_kobj_path: path = '/devices/virtual/block/loop0' 17:16:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x4c000000, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x8, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="21c778087a29a731125c435867ffffff27abcc043f15e324b74003cc20ec000000") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) [ 2017.362238] kobject: 'loop3' (00000000ab984372): kobject_uevent_env [ 2017.395872] kobject: 'loop3' (00000000ab984372): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2017.416772] kobject: 'loop2' (000000007a038117): kobject_uevent_env [ 2017.429698] kobject: 'loop2' (000000007a038117): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2017.456643] kobject: 'loop4' (000000005f4bb802): kobject_uevent_env 17:16:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x5d000000, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x10, 0x0}) 17:16:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x48, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xfffffffffffffffe, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2017.464478] kobject: 'loop4' (000000005f4bb802): fill_kobj_path: path = '/devices/virtual/block/loop4' 17:16:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x6000, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) bind$isdn_base(r1, &(0x7f0000000140)={0x22, 0xc4, 0xfffffffffffffff9, 0x9, 0x9}, 0x6) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x9204, 0x100002) write$FUSE_DIRENT(r2, &(0x7f0000000040)={0x98, 0x0, 0x7, [{0x3, 0x6646, 0xd, 0x0, '/dev/usbmon#\x00'}, {0x4, 0x39f, 0x5, 0x2, '\\ppp1'}, {0x0, 0xfff, 0xd, 0x1, '/dev/usbmon#\x00'}, {0x4, 0x3, 0x0, 0x9}]}, 0x98) 17:16:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x60000000, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2017.514172] kobject: 'loop0' (00000000da7af952): kobject_uevent_env 17:16:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x48, 0x0}) 17:16:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x4c, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x5, 0x400000) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000080)) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2017.555047] kobject: 'loop0' (00000000da7af952): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2017.593020] kobject: 'loop2' (000000007a038117): kobject_uevent_env [ 2017.599530] kobject: 'loop2' (000000007a038117): fill_kobj_path: path = '/devices/virtual/block/loop2' 17:16:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x68000000, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)={0x4, 0x0, 0x10003, 0x39}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000100)={0x20000000000, r2}) 17:16:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x68, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xb90f, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2017.648568] kobject: 'loop3' (00000000ab984372): kobject_uevent_env [ 2017.667006] kobject: 'loop3' (00000000ab984372): fill_kobj_path: path = '/devices/virtual/block/loop3' 17:16:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x4c, 0x0}) [ 2017.696838] kobject: 'loop4' (000000005f4bb802): kobject_uevent_env [ 2017.714213] kobject: 'loop4' (000000005f4bb802): fill_kobj_path: path = '/devices/virtual/block/loop4' 17:16:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x3b, @dev={0xac, 0x14, 0x14, 0x2a}, 0x4e21, 0x4, 'none\x00', 0x31, 0x9, 0x2f}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x4e20, 0x2003, 0x80, 0x9, 0x7a}}, 0x44) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x4fc, 0x0) write$P9_RLOCK(r2, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x1}, 0x8) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) migrate_pages(r3, 0x3, &(0x7f0000000180)=0x9, &(0x7f00000001c0)=0x100) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x6c, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x60, 0x0}) 17:16:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100), 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:44 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x8010, 0xffffffffffffff9c, 0x21) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2c, 0x0, &(0x7f0000000080)=[@increfs_done={0x40106308, r2, 0x1}, @increfs={0x40046304, 0x4}, @clear_death], 0xfb, 0x0, &(0x7f00000000c0)="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"}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f00000002c0)={0x6, 0x2, 0x1, 0x6, 0x5c}) ioctl(r0, 0x1000008912, &(0x7f0000000280)="0adc1f123c123f319bd070") setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000200)=0x1, 0x4) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0x9204, 0x100002) write$FUSE_OPEN(r0, &(0x7f0000000240)={0x20, 0x0, 0x6, {0x0, 0x6}}, 0x20) 17:16:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x6c000000, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2017.771842] kobject: 'loop0' (00000000da7af952): kobject_uevent_env [ 2017.778468] kobject: 'loop0' (00000000da7af952): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2017.824805] kobject: 'loop3' (00000000ab984372): kobject_uevent_env [ 2017.841029] kobject: 'loop3' (00000000ab984372): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2017.853838] kobject: 'loop2' (000000007a038117): kobject_uevent_env [ 2017.862385] kobject: 'loop2' (000000007a038117): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2017.875492] IPVS: set_ctl: invalid protocol: 59 172.20.20.42:20001 [ 2017.875822] kobject: 'loop4' (000000005f4bb802): kobject_uevent_env [ 2017.889155] kobject: 'loop4' (000000005f4bb802): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2017.899607] kobject: 'loop0' (00000000da7af952): kobject_uevent_env [ 2017.906472] kobject: 'loop0' (00000000da7af952): fill_kobj_path: path = '/devices/virtual/block/loop0' 17:16:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100), 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x68, 0x0}) 17:16:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) open_by_handle_at(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="c50000000500000070db7c4de7dd14b162f02fbf133a6a0eebb7c5f119dfdf41353bf491e6be48fc00032d04a61c61d62d816ac9b693fd3a892ba3dc608a47a90902218ffa76fa7f9c8d4e5e759c0e6012556482608fe9d7cc4f6b8062a403b20f7bfc6c3295f9740e36c904435eb1559cba84a4b6752eb5b48cfe0337a0a78386a9dcceb6d5d591db3fa9a77a09466ea80022ba01895e2e2542595ed823538eaca44a94b60642173a2bd52e9c6bbf6ff1807eff5b3b58a39881e034af784247d7bba73f38"], 0x10a01) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000540)={0x0, 0xef, "b1da79644008a2c18703961c000c199a9e78ead7438d71846cb1c61acdd2ad4f36bfa9a78150d3c99c5fe7e78265ee62e733cc3cf1eff918e6697426ada0f3295e962457b907670b630a5fc68476d82f5d8dd9c5e49130c88ac033dbee6b81562cbada56f49d0af42ebbc33f902652e537a31fea4b0011a14207ac934bab78b3e30c643b39595da5b1047f154a11a647fed70418c76860651f425f78a3a959d9a914da7bfc57dcee62714b322723bb03de788ec723c91c121a0d0043669c62cf636ba709f93a5b8293b13ff5aa135a12a96eda914a1f47b2bb762938de86eb6d06f225c09980ee96013c7f1637b27a"}, &(0x7f0000000640)=0xf7) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000680)=@assoc_id=r2, &(0x7f00000006c0)=0x4) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000400)={0x0, 0x7fff, 0x0, 0x42d}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000480)={r3, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}}, 0x6, 0x9}, 0x90) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f319bd070") r4 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x8001, 0x8001, 0x0, 0x6, 0x1ff, 0x7, 0x20, 0x2edd, 0x7fffffff, 0x7, 0x2, 0x30000, 0x7, 0x7a, 0xffff]}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={r5, 0x401, 0x0, 0x54f, 0x3}, &(0x7f00000001c0)=0x18) lseek(r4, 0x20, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r4, 0x9204, 0x100002) bind$ax25(r4, &(0x7f0000000240)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) 17:16:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x70, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2017.923693] kobject: 'loop3' (00000000ab984372): kobject_uevent_env [ 2017.937778] kobject: 'loop3' (00000000ab984372): fill_kobj_path: path = '/devices/virtual/block/loop3' 17:16:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x70000000, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2017.971071] kobject: 'loop2' (000000007a038117): kobject_uevent_env [ 2018.005196] kobject: 'loop2' (000000007a038117): fill_kobj_path: path = '/devices/virtual/block/loop2' 17:16:45 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x0, 0x80000) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9204, 0x100002) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000140)=0x7ff, &(0x7f00000001c0)=0x4) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000040)) 17:16:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100), 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x74, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x1, 0x4, 0x8}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") fstatfs(r0, &(0x7f0000000380)=""/239) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0xdc, 0x1, 0x3, "fedd7eafb80c22f127e40136cae0a2a6", "9e8c848b1474073702074c72d166528f2aafb161619b7db0c2c777a0919ceaede75aa8dda182f69cb609ee101e2b3693edf2debcae220d598bfe9be30d904509e8275002b325142bbee5c98a68aaf6eda81886de33517d2006a47d2a03caa34eaa37f86f48e6904af52ade6516043487ece7f0b157aa0260a77b3dcca3e661f4ea99bfe2989cdebfa2c754e17457eae216a9479ee842dd8c1addd4d6935f44900bc760de527fd2d0b7254598712154f382975ccabdeb71d420e1e40f83660de030d765c3b6210a"}, 0xdc, 0x3) [ 2018.029433] kobject: 'loop3' (00000000ab984372): kobject_uevent_env 17:16:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x6c, 0x0}) 17:16:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x74000000, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000080)=""/16) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x9204, 0x100002) [ 2018.083250] kobject: 'loop3' (00000000ab984372): fill_kobj_path: path = '/devices/virtual/block/loop3' 17:16:45 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x800, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000080)) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2018.143821] kobject: 'loop2' (000000007a038117): kobject_uevent_env [ 2018.150326] kobject: 'loop2' (000000007a038117): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2018.168467] kobject: 'loop1' (00000000bae3875e): kobject_uevent_env 17:16:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x7a, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x7a000000, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2018.187184] kobject: 'loop1' (00000000bae3875e): fill_kobj_path: path = '/devices/virtual/block/loop1' 17:16:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x9) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000180)={r2, 0x1, 0x6, @random="9954e0a441a5"}, 0x10) 17:16:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x70, 0x0}) 17:16:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x1, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0xfeffffff, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2018.220313] kobject: 'loop3' (00000000ab984372): kobject_uevent_env [ 2018.255735] kobject: 'loop3' (00000000ab984372): fill_kobj_path: path = '/devices/virtual/block/loop3' 17:16:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000002c0)) ioctl(r0, 0x2f5, &(0x7f0000000040)="0800000000000008000080") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x441200}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r3, @ANYBLOB="00232bbd7000fbdbdf25090000000c00010008000b007369700014000100080005000300000008000500030000000800040001000000440002000800040038000000080005000000000008000900f76600000800041001000000080005000700000008000708000400060000001400020008000b000a00000008000700c0ffffff4800030008000800060000001400020076657468305f746f5f0072696467650014000600ff010000000000000000000114000600fe8000000000000000000000000000bb00000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0xac, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x1, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x9, 0x4000) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000080)=""/124, 0x1fffff, 0x800, 0x5}, 0x18) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0x3f, 0x3ff, 0x9, 0x5, 0x27000000000000, 0x198}) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x9204, 0x100002) [ 2018.304553] kobject: 'loop4' (000000005f4bb802): kobject_uevent_env [ 2018.339001] kobject: 'loop4' (000000005f4bb802): fill_kobj_path: path = '/devices/virtual/block/loop4' 17:16:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x74, 0x0}) 17:16:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x1, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0xffffff0f, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) [ 2018.367696] kobject: 'loop2' (000000007a038117): kobject_uevent_env [ 2018.378964] kobject: 'loop2' (000000007a038117): fill_kobj_path: path = '/devices/virtual/block/loop2' 17:16:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x2, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2286, &(0x7f0000000080)={0x53, 0x0, 0x4f3, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1ffffffffd, 0x0, 0x1, 0x0}) 17:16:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x9, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe840", 0x0, 0x0, 0x4, 0x0, 0x0}) [ 2018.433639] kobject: 'loop3' (00000000ab984372): kobject_uevent_env [ 2018.441000] kobject: 'loop3' (00000000ab984372): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2018.469749] kobject: 'loop2' (000000007a038117): kobject_uevent_env 17:16:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x7a, 0x0}) [ 2018.484529] kobject: 'loop2' (000000007a038117): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2018.501736] kobject: 'loop3' (00000000ab984372): kobject_uevent_env 17:16:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0xffffff7f, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x500, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x1, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5", 0x0, 0x0, 0x4, 0x0, 0x0}) [ 2018.528485] kobject: 'loop3' (00000000ab984372): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2018.547323] kobject: 'loop4' (000000005f4bb802): kobject_uevent_env [ 2018.560596] kobject: 'loop4' (000000005f4bb802): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2018.577043] kobject: 'loop2' (000000007a038117): kobject_uevent_env 17:16:45 executing program 5: 17:16:45 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x400, 0x0) syz_execute_func(&(0x7f00000001c0)="75c481c62b0904402ae92cb81c750f05bf04000000c4a37bf0c55c41e2e92e363e460f1a7000660fde978fe97c80660f383a9e02000000e30b110f33b8c4014e4e4e5b5b2626660f38091e14dec421045f4607c40bf8c44964660f3838520a8dc48da3bd4877f8aac483397fd300d8c0c4a1662a984d344d3435cfcfafaf6766f2ab440fec3f67ddeae74ec4628cb1ccf72ef7d9f9f47dd9f9f47da4c2b0c10b7b57578171a30b8a826e4fc4816016f7499900ebeb628f0f4f13a25800218de3c02cf52626802d08000000fa3ebf5c450f91f3ffefb5ffffffdcdcc4c3217e218efb7c46474eb83aa2f1fbc422c99f9f0f4bc2e2") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000100)={0x200, 0x6, 0x80, 0x2, 0x9}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000580)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@multicast1, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4e24, 0x0, 0x4e23, 0x4, 0xa, 0x0, 0xa0, 0x8, r3, r4}, {0x8d, 0x6f89, 0x2, 0x8a1, 0x1, 0x9, 0x80, 0x5}, {0x8, 0xffff, 0x7, 0x5}, 0x2, 0x6e6bbe, 0x0, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x21}, 0x4d6, 0x2b}, 0xa, @in=@multicast1, 0x0, 0x0, 0x2, 0x73a, 0x7, 0x8e, 0x6}}, 0xe8) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000080)={0x1, 0x0, 0x102, 0x6, {0x5, 0x7, 0xf7c, 0x4b9}}) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f00000000c0)) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x9204, 0x100002) [ 2018.603984] kobject: 'loop2' (000000007a038117): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2018.616196] kobject: 'loop3' (00000000ab984372): kobject_uevent_env [ 2018.628758] kobject: 'loop3' (00000000ab984372): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2018.646456] kobject: 'loop1' (00000000bae3875e): kobject_uevent_env 17:16:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x1, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0xfc, 0x0}) 17:16:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0xfffffffe, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x600, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2018.661249] kobject: 'loop1' (00000000bae3875e): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2018.687121] kobject: 'loop2' (000000007a038117): kobject_uevent_env [ 2018.698948] kobject: 'loop2' (000000007a038117): fill_kobj_path: path = '/devices/virtual/block/loop2' 17:16:45 executing program 5: 17:16:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x300, 0x0}) 17:16:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x1, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0xfffffffffffffffd) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000040)={0x0, 0x0, {0x207ff, 0xfffffffffffffff8, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) bind$isdn(r1, &(0x7f0000000180)={0x22, 0x27, 0x0, 0x9, 0x8}, 0x6) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0x14, 0x9, 0x1, 0x2, 0x0, 0x400, 0x1, 0x100000000, 0x4f48, 0xffffffffffffffff, 0x2, 0x0, 0xb01b, 0x3, 0x12, 0x4}}) eventfd2(0x1, 0x80000) 17:16:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x700, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x1000000000000, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:45 executing program 5: [ 2018.765354] kobject: 'loop4' (000000005f4bb802): kobject_uevent_env [ 2018.779516] kobject: 'loop4' (000000005f4bb802): fill_kobj_path: path = '/devices/virtual/block/loop4' 17:16:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x500, 0x0}) 17:16:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x5, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x1f00, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2018.834266] kobject: 'loop3' (00000000ab984372): kobject_uevent_env [ 2018.860586] kobject: 'loop3' (00000000ab984372): fill_kobj_path: path = '/devices/virtual/block/loop3' 17:16:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x20000000000000, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x600, 0x0}) 17:16:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x10040, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x9}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x80000001, 0x8, 0x8, 0x0, 0x0, r2}, 0xfffffe4f) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) creat(&(0x7f00000001c0)='./file0\x00', 0x40) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0x9204, 0x100002) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x141001, 0x0) 17:16:46 executing program 5: [ 2018.902268] kobject: 'loop2' (000000007a038117): kobject_uevent_env [ 2018.908792] kobject: 'loop2' (000000007a038117): fill_kobj_path: path = '/devices/virtual/block/loop2' 17:16:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x2000, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2018.957674] kobject: 'loop1' (00000000bae3875e): kobject_uevent_env [ 2018.965295] kobject: 'loop1' (00000000bae3875e): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2018.994361] kobject: 'loop3' (00000000ab984372): kobject_uevent_env 17:16:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x100000000000000, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="e7dbf86ac539c6d71f123c") r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9204, 0x100002) 17:16:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x5, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x700, 0x0}) 17:16:46 executing program 5: [ 2019.010759] kobject: 'loop3' (00000000ab984372): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2019.046129] kobject: 'loop4' (000000005f4bb802): kobject_uevent_env 17:16:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0xffffffffffffff6a, 0x801) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x40, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x2) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000340)={0x0, 0x9, 0xd4}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000080)={r3, 0x1000000004}, &(0x7f0000000280)=0xfffffffffffffdd9) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000100)={r4, @in={{0x2, 0x4e21, @empty}}, [0x4, 0x100000001, 0x7ff, 0x1b, 0x1, 0x4, 0x1, 0x9, 0x1f, 0x9, 0x5, 0x2, 0x0, 0xfffffffffffff3bc, 0x6]}, &(0x7f0000000200)=0x100) r5 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x200) ioctl$VIDIOC_ENUM_FREQ_BANDS(r5, 0xc0405665, &(0x7f00000002c0)={0x101, 0x4, 0x2, 0x0, 0x3bc, 0x80000000, 0x4}) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)) ioctl$KVM_SET_NR_MMU_PAGES(r5, 0x9204, 0x100002) 17:16:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x3f00, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x5, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x1f00, 0x0}) [ 2019.072417] kobject: 'loop4' (000000005f4bb802): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2019.101433] kobject: 'loop2' (000000007a038117): kobject_uevent_env 17:16:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x200000000000000, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:46 executing program 5: [ 2019.153513] kobject: 'loop2' (000000007a038117): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2019.181318] kobject: 'loop4' (000000005f4bb802): kobject_uevent_env [ 2019.189726] kobject: 'loop4' (000000005f4bb802): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2019.196354] QAT: Invalid ioctl 17:16:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x21, 0x0, @buffer={0x300000000000000, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485fe84019c8eaf720f5c094b9533c7ba6a52aeced199d4674ba86a0", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x7, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e5bbb66661485f", 0x0, 0x0, 0x4, 0x0, 0x0}) 17:16:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000200)='