ffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r10, 0x0) stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = gettid() tkill(r12, 0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r13, 0x0) r14 = getgid() r15 = gettid() tkill(r15, 0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r16, 0x0) stat(&(0x7f0000000e80)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x1, &(0x7f00000003c0)=[r17]) getgroups(0x1, &(0x7f0000000840)=[r17]) r19 = getpgrp(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r20, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0, 0x0}, &(0x7f00000008c0)=0xc) r22 = gettid() tkill(r22, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000900)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000000a00)=0xe8) r24 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r24, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) fstat(r24, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r26 = getpid() r27 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r27, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r27, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r27, 0x29, 0x23, &(0x7f0000000b00)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000c00)=0xe8) r29 = getgid() getresgid(&(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0)=0x0) r31 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r31, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r32 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r32, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r33 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r33, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r34 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r34, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) sendmsg$netlink(r3, &(0x7f0000000e40)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfb, 0x41001288}, 0xc, &(0x7f0000000640)=[{&(0x7f0000000600)={0x18, 0x37, 0x500, 0x70bd28, 0x25dfdbfe, "", [@typed={0x8, 0x49, @uid=r5}]}, 0x18}], 0x1, &(0x7f0000000d00)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r18}}}, @cred={{0x1c, 0x1, 0x2, {r19, r20, r21}}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r25}}}, @cred={{0x1c, 0x1, 0x2, {r26, r28, r29}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r30}}}, @rights={{0x2c, 0x1, 0x1, [r1, r31, r1, r32, r33, r2, r34]}}], 0x130, 0x10009000}, 0x8048844) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000780)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779a05c5c5a09000000ecf323c935ba26eab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc082b7bcdec844f667da0860700000000000000000000000000000000ebc53db0f533e8d15d34bf", 0x82, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x3, 0x2) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r35 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) r36 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r37 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r37, r36) ioctl$VIDIOC_ENUM_FREQ_BANDS(r36, 0xc0405665, &(0x7f00000002c0)={0x2, 0x3, 0x80000000, 0x1000, 0x1000, 0x2, 0x17}) ioctl$sock_SIOCSIFBR(r35, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:21:41 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r2, &(0x7f0000d85fe4)={0xa, 0x4e20, 0x1, @rand_addr, 0x94}, 0x1c) r3 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) fdatasync(r4) sendto$inet6(r3, &(0x7f0000000080)="dd", 0x1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0x0, 0x0, 0xfffffffffffffdcc}}], 0x400000000000490, 0x6, 0x0) 20:21:41 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x3}}, 0xb8}}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x8e, "fd38ba74b4dc81838846ebc22e4522a053d75f12ec30ab8c9065df09d814156124c7690f9c27941b5c6b882cd6aff5e68cb77ee131c4352289b7a25220682b214e31b93286227b506654d2c2c124ab46742b330288aee58072c46fd973608fd7405ad7d1eede0deb0b497a9f5d5e9a78f6972b63c71b2e6ccfe6eebb21921fb8df849d9aa644c7d786f1efc066c4"}, &(0x7f0000000000)=0xb2) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xfffffffffffffd65, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x2000, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) dup2(r1, r3) write$P9_RREAD(r1, &(0x7f00000000c0)={0xcb, 0x75, 0x2, {0xc0, "f4100220a642e8941d799aadcecb885b163b2bca97ed1e588e1a9fb81273a7a9fc83071ec089f1f61be93ff6555a57b2786efaad1316596120045c991b39370e539f5c1163643eab96110fe15b4d107986675f754fcd3590a4620fd4e727a643de0521b41f864209a307257c14b795c5842cd057deb9b3b383afae33f805388bc8fd21e3c2986d66d1723a3a95a70c843cf31ab5f6f7c3a574813953acffa2e8a1987c04b538cc7ee819b99c0da9f290ff310cba0eb1c7123c2b8aace00acda7"}}, 0xcb) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3, 0x208000) 20:21:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xad}, 0x2) 20:21:41 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x80) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1e0001000000000000000000000000e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000001631e68f7a20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c3ca5ba2e903abe0f6723e003dfdb0e800000000030000e7339f77b566206300"], 0xb8}}, 0x0) 20:21:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r2, r1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:21:41 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0x100000003, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:21:41 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x227, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x200a02, 0x0) accept$nfc_llcp(r3, &(0x7f0000000280), &(0x7f0000000180)=0x60) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r1}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f0000000580)={&(0x7f0000000080)={'wp256-generic\x00'}}) keyctl$describe(0x6, r1, &(0x7f0000000000)=""/84, 0x54) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1e0001000000000000000000000000e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000010000000000000000"], 0xb8}}, 0x0) shmget(0x0, 0x1000, 0x78000000, &(0x7f0000ffe000/0x1000)=nil) 20:21:41 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, [], 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1e0001000000000000000000000000e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000a0000000000000000006300"/112], 0x4}, 0x1, 0x0, 0x0, 0x8000000}, 0x40000) 20:21:42 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x40, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r4, r3) renameat2(r4, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:21:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f0000000040), 0x3}) 20:21:42 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r2, r1) r3 = accept$netrom(r2, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @bcast, @default, @bcast, @null, @netrom, @default, @rose]}, &(0x7f00000000c0)=0x48) getsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000100)=0x2ef, &(0x7f0000000140)=0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x3}}, 0xb8}}, 0x0) [ 343.431204] sg_write: 21 callbacks suppressed [ 343.431213] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 343.431213] program syz-executor.2 not setting count and/or reply_len properly [ 343.481764] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 343.481764] program syz-executor.2 not setting count and/or reply_len properly 20:21:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000002580)=ANY=[@ANYPTR64, @ANYBLOB="eb5105b5f796d20eaed7ac8e8a8e2795a044e668c4d894dae0f37c2a5875aa81e588e4fe5433ac4f2de995508ed26ed0d17023b21d55ad1a0ed3ab500b810cf69c57a6379d38fb2015d0a659905b2132a2220425340577", @ANYRES16, @ANYRESOCT, @ANYRES32, @ANYRES32], 0x80) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r1, 0x0, r4, 0x0, 0x20000000003, 0xf) 20:21:44 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file1\x00', 0x2, 0x28) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x100) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:21:44 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x400, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000001c0)=&(0x7f0000000180)) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:21:44 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e90ab9a10275955af9832d551fb"], 0xfe4e) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285629, &(0x7f00000000c0)={0x0, 0x101, 0x9, [], &(0x7f0000000040)=0x40}) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r4, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r4, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:21:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r2, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x8, &(0x7f00000000c0)=0x2) r3 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x8800, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="dd", 0x1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0x0, 0x0, 0xfffffffffffffdcc}}], 0x400000000000490, 0x6, 0x0) 20:21:44 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r2 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r5 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r5, r4) write$P9_RMKDIR(r4, &(0x7f0000000280)={0x14, 0x49, 0x1, {0x347adbc2a4ba2e03, 0x1, 0x2}}, 0x14) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) prctl$PR_GET_THP_DISABLE(0x2a) write$P9_RWRITE(r3, &(0x7f00000001c0)={0xb, 0x77, 0x2, 0x1f}, 0xb) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) 20:21:44 executing program 3: syz_open_procfs(0x0, &(0x7f00000005c0)='clear_refs\x00\xb0I\v8e\x84V\x1f\x13.\xd2e\xc6\xd1\x00x\xe6\fK\xa3/\xd7\xb9Iq\\\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!\xc4\xc9\xe1j0PM\xfb\xed\x8a&\'\xdf\x9f\xc3\x00n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\xac\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=/\x89\x06r\b\'Ho\xf7\x88B7e\bU\'\x83\xf0\x9c\xbf\xdc7\xf8;\xea}\xa8\x9fvs\xc4\xd36\t\x1eu7L\xe0\xb0~?\xdb\xf9t]5\x0e\xe0\xad\xa2_\xadL\xe6\xc4\xed\\\x85:5\b\x9b\xa0.h|\x84\x05\x00\xdd5\x0e\xb1\x18\x06\xbf\xe2\xd61\xc1\xa0-\x18\x12\xba\xa2\xf1\xc2D\x92\xd4\xc5\xf7$\x18\x8a\b/\x8e\xa2\xf07\xa9\x05x\xa91\xd6\x9f\x15\x18vX\x9b\xa4\x95\x83\xd0\xee\x92\xb1\xcb&y\xa7F\xb2\x8fsp{\xb64\xd4!\xf5d_\xea ;\x11\a\xd0\x18\xa8\xba\x1f\x95\xa5\xa6{f\xb2\xd2\x9f') ioctl$TCFLSH(0xffffffffffffffff, 0x541a, 0x71fff5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x380a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x80002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0x0, 0x28, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000400)='dax\x00', 0x80, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 345.865931] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 345.865931] program syz-executor.2 not setting count and/or reply_len properly [ 345.879861] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 345.879861] program syz-executor.0 not setting count and/or reply_len properly 20:21:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r2, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r3 = socket$inet6(0xa, 0x802, 0x88) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r5 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r5, r4) ioctl$sock_ax25_SIOCADDRT(r5, 0x890b, &(0x7f00000000c0)={@default, @null, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) setsockopt$inet6_udp_int(r3, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r7 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r7, r6) ioctl$TIOCGLCKTRMIOS(r6, 0x5456, &(0x7f0000000040)={0x7, 0x6, 0x7, 0x465, 0x9, 0x97, 0x7, 0x6, 0x0, 0x3800, 0x6, 0xf1a}) sendto$inet6(r3, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="dd", 0x1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0x0, 0x0, 0xfffffffffffffdcc}}], 0x400000000000490, 0x6, 0x0) 20:21:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r3, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r4 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r4, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) write$P9_RWALK(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="640000006f0200070040045fc400000008000000000000000403000000040000000000000012020000000200000000000000d000000000000000000000000000000000000000000000000007d80000000005000000000000000401000000080000005de09fab5211250000f12ba21cf5ba92444ed0e5fff9e5e96863f9f6988eae9668c513f02b816052c7ac0a137de65cd38ae0cbb3e0598f"], 0x64) sendto$inet6(r4, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="dd", 0x1, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0x0, 0x0, 0xfffffffffffffdcc}}], 0x400000000000490, 0x6, 0x0) listen(r0, 0x0) ustat(0x7fffffff, &(0x7f0000000040)) 20:21:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r2, r1) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000040)) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r4, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r5 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r5, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x7, @local, 0xfffffff9}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e21, @rand_addr=0x8}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}, @in6={0xa, 0x4e23, 0x7, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xff}, @in={0x2, 0x4e23, @loopback}], 0xb8) sendto$inet6(r5, &(0x7f0000000080)="dd", 0x1, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0x0, 0x0, 0xfffffffffffffdcc}}], 0x400000000000490, 0x6, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000000)='security.capability\x00', &(0x7f00000001c0)=@v2={0x2000000, [{0x20, 0x9}, {0x10000, 0x5fadd7f2}]}, 0x14, 0x4) 20:21:45 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000000)='./bus/file0\x00', 0x0, 0x92) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 346.480342] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 346.480342] program syz-executor.0 not setting count and/or reply_len properly 20:21:45 executing program 3: r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000400)=@in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, 0x0}, 0x2000c4ff) 20:21:45 executing program 3: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x2008001) r2 = open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) dup3(r1, r0, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1100000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x40000}]) [ 346.668457] syz-executor.3 (13519) used greatest stack depth: 23712 bytes left 20:21:45 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00ecdc82a64d8f01627a8758fcfb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) r3 = gettid() tkill(r3, 0x14) ptrace$setopts(0x4200, r3, 0x4, 0x44) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x400000, 0x2) [ 346.754475] audit: type=1804 audit(1569702105.445:108): pid=13525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir091691022/syzkaller.6CBaFA/319/bus" dev="sda1" ino=17523 res=1 20:21:45 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="ff5b7213"], 0x4) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) [ 346.848641] audit: type=1804 audit(1569702105.485:109): pid=13525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir091691022/syzkaller.6CBaFA/319/bus" dev="sda1" ino=17523 res=1 20:21:45 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0xc000, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:21:46 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) dup2(r6, r0) 20:21:46 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r2 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r5 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r5, r4) write$P9_RMKDIR(r4, &(0x7f0000000280)={0x14, 0x49, 0x1, {0x347adbc2a4ba2e03, 0x1, 0x2}}, 0x14) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) prctl$PR_GET_THP_DISABLE(0x2a) write$P9_RWRITE(r3, &(0x7f00000001c0)={0xb, 0x77, 0x2, 0x1f}, 0xb) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) 20:21:46 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000140)=0x40) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r2, r1) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000000)) r3 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="13f20cf0446b33382cc8020700a6b060301d5396da2600c984a61e52151594e0a0d6db01dfc36b99c0"], 0xfe4e) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r4, &(0x7f0000000080)={0x14}, 0xfffffff4) r5 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) ioctl$UI_SET_KEYBIT(r5, 0x40045565, 0x240) splice(r3, 0x0, r4, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 347.701740] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 347.701740] program syz-executor.3 not setting count and/or reply_len properly 20:21:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000340)={'nat\x00'}, &(0x7f0000000400)=0x54) r3 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r5 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r5, r4) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r5, 0x80dc5521, &(0x7f00000000c0)=""/146) bind$inet6(r3, &(0x7f0000d85fe4)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) r6 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r6, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) sendto$inet6(r6, &(0x7f0000000080)="dd", 0x1, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000380), 0x0, 0x6, 0x0) r7 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x24002) r8 = creat(0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r7, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {&(0x7f00000001c0), r9}}, 0x18) 20:21:46 executing program 4: prctl$PR_GET_SECUREBITS(0x1b) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bind$inet6(0xffffffffffffffff, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000040)=0x5) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="dd", 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0x0, 0x0, 0xfffffffffffffdcc}}], 0x400000000000490, 0x6, 0x0) 20:21:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000300)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000380)={0x0, 0x1e9, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000946377c6f614e184692cb7b9986b234360173225084817c7ccb6bff8eed059bfbdff070000f2df8edd43e6ac409264339a4d2c2b1aa54a9ce946307a8ea7c43d60eaf71d7e6b21806e9af43d69031f032b9e7a4990a584fecd0b81e4816f6c8c2a833f6c3a8c671624f82878a069a9fc5a012301b1d80f3c7f3d525dcc8c4ff5d000efdb13328ef8fbbaf9b924956f2e1b625d98e234953c51c2a6f84d6b88a5f376082eae0d0ebc1acf7906410a14363becad7d6e99aa1b094dddd79a77982510bb", @ANYRES16=r5, @ANYBLOB="0b020000000000000000140000000c0007000800020000f0ffff"], 0x20}}, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r8 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r8, r7) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r8, &(0x7f0000001680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x11002010}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r9, 0x12, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) read$alg(r6, &(0x7f0000000680)=""/4096, 0x1000) read$alg(r6, &(0x7f0000000600)=""/121, 0x79) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000016c0)={0xc4, r5, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x84, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2cc8400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000003}, 0x20000084) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:21:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r2, &(0x7f0000d85fe4)={0xa, 0x4e23, 0x4, @remote}, 0x7) r3 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="dd", 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r6 = dup3(r4, r5, 0x22eecfae67415618) ioctl$KDGKBMODE(r6, 0x4b44, &(0x7f0000000040)) pause() recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0x0, 0x0, 0xfffffffffffffdcc}}], 0x400000000000490, 0x6, 0x0) [ 348.125150] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 348.125150] program syz-executor.0 not setting count and/or reply_len properly [ 348.234231] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 348.234231] program syz-executor.0 not setting count and/or reply_len properly 20:21:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r2 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r5 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r5, r4) write$P9_RMKDIR(r4, &(0x7f0000000280)={0x14, 0x49, 0x1, {0x347adbc2a4ba2e03, 0x1, 0x2}}, 0x14) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) prctl$PR_GET_THP_DISABLE(0x2a) write$P9_RWRITE(r3, &(0x7f00000001c0)={0xb, 0x77, 0x2, 0x1f}, 0xb) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) 20:21:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x5f9ef1db0ae20587}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb7360400000056c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) [ 348.376917] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 348.376917] program syz-executor.3 not setting count and/or reply_len properly 20:21:48 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:21:48 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) syz_mount_image$ntfs(&(0x7f0000000300)='ntfs\x00', &(0x7f0000000340)='./bus\x00', 0x98, 0x1, &(0x7f0000000480)=[{&(0x7f0000000380)="90bc98d230aef852dec9c2ceb45916b65aac389ff209e390257040d732d95a6752b6ee4fe0c255a5d76a665aa8feb8740455cd7266ffd4d54231f118fa2898e1ba0d4c884a90d840f388c14229146d87afef7fe8e2f383313b399cfa11b17b771182162b9a0014aa2cd19509498c6928727de721f152f537b9fec0949ac716e18402686086ceb0c92b7d6098a518046cc2018ad1bb8b9cafcd417d14bea9d24e2f37a36c30a6ab245298440befe5c507ce95f10ae01d0a4d7637b7a0789e348bc606c0d8bc5075c21d448171dcd8a995f495613151dc7b42a17598bcfcc1c2ba2999809f85b99dc6", 0xe8, 0x80000000}], 0x201000, &(0x7f00000004c0)={[{@errors_recover='errors=recover'}, {@show_sys_files_no='show_sys_files=no'}, {@show_sys_files_yes='show_sys_files=yes'}], [{@context={'context', 0x3d, 'unconfined_u'}}]}) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r4, r3) r5 = accept$netrom(r4, &(0x7f0000000000)={{0x3, @bcast}, [@remote, @rose, @null, @netrom, @bcast, @rose, @rose]}, &(0x7f00000000c0)=0x48) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000140)={0x1, 0x8, 0x0, 0x5, 0x2}) 20:21:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/sulinux/checkreqprot\x00', 0x242401, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x100000000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0xcab7062a1693c5f6, r2) ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x5b9) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x81000, 0x0) ioctl$VIDIOC_QUERYCAP(r5, 0x80685600, &(0x7f0000000200)) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) socket$nl_crypto(0x10, 0x3, 0x15) 20:21:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xad}, 0x2) 20:21:48 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e21, 0x5, @empty, 0x6b01}, {0xa, 0x4e21, 0xd4, @dev={0xfe, 0x80, [], 0x24}, 0xfffffffa}, 0x9, [0x4, 0x0, 0x6, 0x83c2, 0x7fffffff, 0x240000, 0x4, 0x9]}, 0x5c) bind$inet6(r2, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r3 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="dd", 0x1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0x0, 0x0, 0xfffffffffffffdcc}}], 0x400000000000490, 0x6, 0x0) [ 349.867881] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 349.867881] program syz-executor.3 not setting count and/or reply_len properly 20:21:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) stat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x1, &(0x7f00000003c0)=[r1]) r2 = getgid() stat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x1, &(0x7f00000003c0)=[r3]) stat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x1, &(0x7f00000003c0)=[r4]) getgroups(0x4, &(0x7f0000000040)=[r1, r2, r3, r4]) r5 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x3ff, 0x40a40) ioctl$PPPIOCSMRRU(r5, 0x4004743b, &(0x7f0000000200)=0x6) 20:21:48 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r2, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) write$sndseq(r1, &(0x7f0000000540)=[{0x2, 0x2, 0x40, 0xd3, @time={0x77359400}, {0x7, 0x7}, {0xff, 0x63}, @note={0x20, 0xfb, 0x4, 0x6, 0x3}}, {0x5, 0x3, 0x2, 0x39, @time={r3, r4+10000000}, {0x29, 0x80}, {0xb5, 0x7}, @note={0x80, 0xff, 0x5, 0x1, 0x81}}, {0x9, 0x1, 0x3f, 0x0, @tick=0xfffffffc, {0x94, 0xab}, {0x2, 0x8}, @note={0xff, 0x86, 0x94, 0x8, 0x3f}}, {0x3, 0x1f, 0x0, 0x5, @time={0x77359400}, {0x5, 0xfa}, {0x0, 0x3}, @note={0x0, 0x3, 0x81, 0x0, 0xe006}}, {0x2, 0x4d, 0x0, 0x7, @tick=0x7, {0x80, 0x2}, {0x7, 0x2}, @quote={{0x5a}, 0x100, &(0x7f0000000280)={0x9c, 0x9, 0x1, 0x6, @tick=0x6, {0x20, 0x3}, {0x7, 0x1}, @time=@tick=0x8}}}, {0x4, 0xff, 0x31, 0xe0, @tick=0x3ff, {0x0, 0x40}, {0x9, 0x1f}, @raw8={"8a531dc09d0936c1e61245b5"}}, {0x7e, 0x14, 0x7f, 0x5, @time={0x77359400}, {0x1, 0x64}, {0x3, 0xeb}, @control={0x3f, 0xfffffffd}}], 0x150) r5 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r5, 0x11, 0xb, &(0x7f00000003c0)=0x4, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x484100, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r6, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x2, {0x81, 0xcbf, "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", 0x26, 0x8, 0x6, 0x6, 0x0, 0x1, 0x27, 0x1}}}, 0x128) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b800000019000100000000f900000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e0806a600000400"/112], 0xb8}}, 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000040)=0x0) syz_open_procfs(r8, &(0x7f00000000c0)='net/ip6_flowlabel\x00') sendto$inet6(r5, &(0x7f0000000080)="dd", 0x1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0x0, 0x0, 0xfffffffffffffdcc}}], 0x400000000000490, 0x6, 0x0) [ 349.916913] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 349.916913] program syz-executor.0 not setting count and/or reply_len properly 20:21:48 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0012aeff472a3839585a974976a1e04c67018c51de76077c8115399a828ca518f360d587bd9956b508271cbefbd45b"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 350.005170] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 350.005170] program syz-executor.3 not setting count and/or reply_len properly 20:21:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/access\x00', 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) [ 350.084858] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 350.084858] program syz-executor.0 not setting count and/or reply_len properly 20:21:48 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000780)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779a05c5c5a09000000ecf323c935ba26eab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc082b7bcdec844f667da0860700000000000000000000000000000000ebc53db0f533e8d15d34bf", 0x82, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000280)={'broute\x00', 0x0, 0x4, 0x85, [], 0x5, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], &(0x7f00000001c0)=""/133}, &(0x7f0000000040)=0x78) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r3, &(0x7f0000d85fe4)={0xa, 0x4e23, 0xfffffffd, @rand_addr, 0x6}, 0x1c) r4 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r4, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000001) sendto$inet6(r4, &(0x7f0000000080)="dd", 0x1, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0x0, 0x0, 0xfffffffffffffdcc}}], 0x400000000000490, 0x6, 0x0) socket$l2tp(0x18, 0x1, 0x1) 20:21:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) [ 350.191441] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 350.191441] program syz-executor.3 not setting count and/or reply_len properly [ 350.261754] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 350.261754] program syz-executor.0 not setting count and/or reply_len properly 20:21:49 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/access\x00', 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) [ 350.445792] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 350.445792] program syz-executor.3 not setting count and/or reply_len properly 20:21:49 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="fb3253e3c719b102ef2fff9928e3dcacab60489dad4a73e774baa9f81a52325fb7bf442c7ef1c70aba0cfed950b386a4384444eb78cf8be684402fd1d6bf2a7a62fc66b9fa3b6b94218c1da1a07f5c45413295f896137f87d95baf4e92460bfb9441be438ee81b73f2fc91a07478f6d9c42d458dfea6f95976d167ecd84a6e1db4163c8c97d07ee9d2b5294d"], 0xfe4e) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000440)) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0xfffffff4) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000000)={0x6, 0x6}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) write$cgroup_type(r4, &(0x7f0000000140)='threaded\x00', 0x9) 20:21:49 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r1, r0) bind$rxrpc(r1, &(0x7f00000002c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x9}}, 0x24) r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0xec5, 0x807a370f5e8f7881) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f00000001c0)=""/233) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:21:49 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/access\x00', 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:21:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r2, &(0x7f0000d85fe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) r3 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e24, 0x3, @rand_addr="992a07020e33830a47acc18493eafa2a"}, 0x9546dea6e468e191) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x9) pwrite64(r4, &(0x7f00000000c0)="3243711c0c357b3a86245b88ff27edf6e2408c7d4ac29338f57197fea12d70d8224790eee68cfdc5f4269fa88e6ec3670eddfaf86267c3d4cc426bacecba8f561088051c25fd5b2b471c53e33091befba152970cac9d3a9f820de9ddde84b4812c8b71e324ab659dccac0417568192c31dea84c741f333148888d75ce9282c2ea549804d6999e3a5647ae1f835ac94064e52a18060a1e9f9d4e6e17d9097eefb9134bacdc576f53124470d2ff01fe124e38f64", 0xb3, 0x5c) sendto$inet6(r3, &(0x7f0000000080)="dd", 0x1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0x0, 0x0, 0xfffffffffffffdcc}}], 0x400000000000490, 0x6, 0x0) 20:21:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000040)) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xb83b}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x100000001, 0x20000) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffe1}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000200)={0x0, r4, 0x5}) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) sigaltstack(&(0x7f0000ffb000/0x4000)=nil, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) [ 350.665034] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 350.665034] program syz-executor.3 not setting count and/or reply_len properly [ 350.672349] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 350.672349] program syz-executor.0 not setting count and/or reply_len properly [ 350.744368] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 350.744368] program syz-executor.2 not setting count and/or reply_len properly 20:21:49 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r2, r1) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0xc642953fbcbf946f, 0x6, {0x7, 0x1f, 0x9, 0x2511140, 0x0, 0x2, 0x401, 0x8}}, 0x50) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:21:49 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="304c76fc420560f13af802dc6c9919bd353c292b162551fb8c050279ecd518ec6f1bbbcddc46f676152d22"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:21:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x202, 0x0, @perf_bp={0x0}, 0x100, 0xffffffffffffff81}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x9) sendto$inet6(r1, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x4e22, 0xffff03f7, @remote, 0x2b7f}}}, 0x88) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) r3 = semget$private(0x0, 0x3, 0x400) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000180)=""/53) prctl$PR_SET_UNALIGN(0x6, 0x2) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:21:49 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x80, 0xc4ab13d5933afcff) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0xcb7a, 0x5}, @mss={0x2, 0x1}], 0x2) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:21:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x400, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000001c0)=0x80000001) setsockopt$inet6_dccp_int(r1, 0x21, 0x10, &(0x7f0000000180)=0x800, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:21:49 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r1, r0) bind$rxrpc(r1, &(0x7f00000002c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x9}}, 0x24) r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0xec5, 0x807a370f5e8f7881) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f00000001c0)=""/233) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) [ 351.002835] audit: type=1400 audit(1569702109.695:110): avc: denied { create } for pid=13670 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_iscsi_socket permissive=1 20:21:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x21}, 0x0, 0xc, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:21:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:21:49 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/context\x00', 0x2, 0x0) dup3(r3, r4, 0x40000) r5 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r5, r2) ioctl$EVIOCGPHYS(r5, 0x80404507, &(0x7f0000000180)=""/192) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r7 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r7, r6) r8 = ioctl$TUNGETDEVNETNS(r7, 0x54e3, 0x0) sync_file_range(r8, 0xf57, 0x100000000, 0x5) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r10 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r10, r9) setsockopt$TIPC_MCAST_REPLICAST(r10, 0x10f, 0x86) [ 351.115464] audit: type=1400 audit(1569702109.695:111): avc: denied { ioctl } for pid=13670 comm="syz-executor.2" path="socket:[49012]" dev="sockfs" ino=49012 ioctlcmd=0x6607 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_iscsi_socket permissive=1 20:21:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x149300, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:21:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r2, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r3 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="dd", 0x1, 0x0, 0x0, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/relabel\x00', 0x2, 0x0) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0x0, 0x0, 0xfffffffffffffdcc}}], 0x400000000000490, 0x6, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r5 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r5, r4) ioctl$VT_SETMODE(r5, 0x5602, &(0x7f0000000300)={0x6, 0x1f, 0x39, 0x4, 0x400}) sendmmsg$nfc_llcp(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x27, 0x1, 0x2, 0xe6edd521dce6d36d, 0x9, 0xc2, "d91f6448a2b11ff71f825c2567bdbb45a0f2b3cceade51b4b611ef046bce960b320fb1bb7d7017eb4d45c8cc587126537f3b525d479dcc3f6f84902fd86b06", 0x30}, 0x60, &(0x7f0000000040)=[{&(0x7f00000001c0)="903f00dd78e39c55b2a640059167d677338523ac1eacc7a8427e1c45d6b7cc7dd52221507a65174e5f220a52c163f61f490be3b795ce1a9b19d7436b4a13de25560483ab863f13c520662ad370011d250fa617668c280e3f68ca8adfdfa29268a1ee2e9117666880c57d4045047a445533ceb6ec14263bb2a73cd7d9335d030b3f24a57949f337181602b20ac2b650b169e00a47767fdcd5fb3228fd303a9c5a", 0xa0}, {&(0x7f0000000400)="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", 0x1000}], 0x2, &(0x7f0000000140)={0x40, 0x11, 0x6, "7e5dbe7b64dc47387f14849d4056edefee583d8308100004401e1eb0bdfd7a07b8410ad8c4bf424dbfcbdb8ef77f03b5"}, 0x40, 0x4000000}], 0x1, 0x4) 20:21:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:21:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/context\x00', 0x2, 0x0) dup3(r3, r4, 0x40000) r5 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r5, r2) ioctl$EVIOCGPHYS(r5, 0x80404507, &(0x7f0000000180)=""/192) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r7 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r7, r6) r8 = ioctl$TUNGETDEVNETNS(r7, 0x54e3, 0x0) sync_file_range(r8, 0xf57, 0x100000000, 0x5) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r10 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r10, r9) setsockopt$TIPC_MCAST_REPLICAST(r10, 0x10f, 0x86) 20:21:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0xa01c0, 0x0) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f00000001c0)={0x1, 0x0, [{}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r6 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r6, r5) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) 20:21:50 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="eb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:21:50 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="ff"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000000)=0x2, 0x4) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:21:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x9, 0x4c4000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000001c0)={0x3, 0x70, 0x2, 0x1, 0x4, 0x3, 0x0, 0x3, 0x0, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000180), 0x11}, 0x820c66e112d36075, 0x0, 0x4, 0x6, 0x391, 0x8}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) r4 = creat(0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r5}}, 0x18) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @in={0x2, 0x4e24, @multicast2}}}, 0x90) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r6 = gettid() tkill(r6, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000400)={{0x0, 0x1, 0x6, 0x9, 'syz0\x00', 0xa214}, 0x2, 0x20, 0x2, r6, 0x7, 0x2, 'syz1\x00', &(0x7f0000000340)=['irlan0\x00', '/dev/audio\x00', '/dev/admmidi#\x00', '/dev/audio\x00', '/dev/admmidi#\x00', '/dev/sg#\x00', 'security(\x00'], 0x4c, [], [0xf8, 0x4, 0x40, 0x6]}) 20:21:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000180)=0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:21:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0xa01c0, 0x0) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f00000001c0)={0x1, 0x0, [{}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r6 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r6, r5) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) 20:21:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) accept4(r0, &(0x7f0000002440)=@hci={0x1f, 0x0}, &(0x7f00000024c0)=0x80, 0x800) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xff21, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x20, 0x3b, r3}, {}, {0xfff}}}, 0xb8}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r7, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r9 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r9, r8) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x66, &(0x7f0000000040)={r11}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f00000007c0)={r11, @in6={{0xa, 0x4e23, 0x10000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}}, 0x6be5cb49, 0x7, 0x0, 0xffffffff}, &(0x7f0000000880)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r8, 0x84, 0x19, &(0x7f00000008c0)={r12, 0x96fa}, 0x8) r13 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r13, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) r14 = openat$audio(0xffffffffffffff9c, &(0x7f0000000740)='/dev/audio\x00', 0x80, 0x0) write$cgroup_subtree(r14, &(0x7f0000000900)=ANY=[@ANYBLOB="2b696f2000696f202d637075202b705064732099147e17d7f04d9e4357792d6c9b5f"], 0x13) r15 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) ioctl$sock_SIOCINQ(r15, 0x541b, &(0x7f0000000700)) sendto$inet6(r13, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) sendto$inet6(r13, &(0x7f0000000080)="dd", 0x1, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0x0, 0x0, 0xfffffffffffffdcc}}], 0x400000000000490, 0x6, 0x0) r16 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x800, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000400)=0x8f) sendmsg$nl_xfrm(r16, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)=@updpolicy={0x240, 0x19, 0x10, 0x70bd2a, 0x25dfdbfb, {{@in=@dev={0xac, 0x14, 0x14, 0x24}, @in6=@mcast2, 0x4e23, 0x9, 0x4e22, 0xfff8, 0x2, 0x20, 0xe0, 0x11, 0x0, r17}, {0x7, 0x6e2, 0x1ff, 0x4, 0x8, 0x1000, 0x8, 0x5}, {0x8, 0x4, 0xfffffffffffff26e, 0xe16}, 0x4, 0x6e6bc0, 0x2, 0x1, 0x2}, [@algo_auth={0x12c, 0x1, {{'crct10dif\x00'}, 0x710, "ae37dfef3445343a706112f5f04170b424ddf9ff293d9d490219b1652f1098ff4650611d319baa2d4b54a4db950e7a64e6638e74b29c1407920586918514d056d72c267a973715c323584c02b9b19109af5c7448655879ec235b1ad244c90ba31132808974ba2509eae0f85753ce3697ab638228291daea19d52105be98f60c819aa999551f7ae4f69a092a3366169dad9d3424014de01dff573cff7948c0ae4648aa6a54aa8bced9f647f60647a2c068ac896c83c78592cf2a5ca19d7fb0fb4cad2b8110b1446bb9d9eb79324f20a12d3554fad9fdd785e822991146270871e9b75"}}, @address_filter={0x28, 0x1a, {@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0x4, 0x81}}, @replay_val={0x10, 0xa, {0x70bd28, 0x70bd27, 0x80}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e22, 0x4e24, @in6=@mcast1}}, @replay_thresh={0x8, 0xb, 0x1}]}, 0x240}, 0x1, 0x0, 0x0, 0x4000101}, 0x875db95d9347089b) 20:21:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r2, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r3 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="dd", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040)=0x20, 0x4) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0xfffffffffffffd62, 0x0, 0xfffffffffffffdcc}}], 0x4000000000001d4, 0x2027, 0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x11}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) r4 = gettid() r5 = getpgrp(0x0) tgkill(r4, r5, 0x17) 20:21:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0xa01c0, 0x0) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f00000001c0)={0x1, 0x0, [{}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r6 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r6, r5) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) 20:21:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getresgid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e20, @multicast2}}}, &(0x7f0000000280)=0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000002c0)={r4, @in={{0x2, 0x4e21, @empty}}, 0xfde, 0x95, 0x722, 0x7ff, 0x572}, &(0x7f0000000380)=0x98) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:21:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @mcast2, 0xc1}, 0x1c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r2, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r3 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="dd", 0x1, 0x0, 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f00000001c0)={0x2, 0x1, [0x1f, 0x0, 0x7, 0x200, 0x8, 0x9, 0x8, 0x2]}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x3a1042, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r5, 0x7709, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000100)) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0x0, 0x0, 0xfffffffffffffdcc}}], 0x400000000000490, 0x6, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r7 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r7, r6) ioctl$TIOCSBRK(r6, 0x5427) 20:21:50 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) accept4(r0, &(0x7f0000002440)=@hci={0x1f, 0x0}, &(0x7f00000024c0)=0x80, 0x800) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xff21, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x20, 0x3b, r3}, {}, {0xfff}}}, 0xb8}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r7, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r9 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r9, r8) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x66, &(0x7f0000000040)={r11}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f00000007c0)={r11, @in6={{0xa, 0x4e23, 0x10000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}}, 0x6be5cb49, 0x7, 0x0, 0xffffffff}, &(0x7f0000000880)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r8, 0x84, 0x19, &(0x7f00000008c0)={r12, 0x96fa}, 0x8) r13 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r13, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) r14 = openat$audio(0xffffffffffffff9c, &(0x7f0000000740)='/dev/audio\x00', 0x80, 0x0) write$cgroup_subtree(r14, &(0x7f0000000900)=ANY=[@ANYBLOB="2b696f2000696f202d637075202b705064732099147e17d7f04d9e4357792d6c9b5f"], 0x13) r15 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) ioctl$sock_SIOCINQ(r15, 0x541b, &(0x7f0000000700)) sendto$inet6(r13, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) sendto$inet6(r13, &(0x7f0000000080)="dd", 0x1, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0x0, 0x0, 0xfffffffffffffdcc}}], 0x400000000000490, 0x6, 0x0) r16 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x800, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000400)=0x8f) sendmsg$nl_xfrm(r16, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)=@updpolicy={0x240, 0x19, 0x10, 0x70bd2a, 0x25dfdbfb, {{@in=@dev={0xac, 0x14, 0x14, 0x24}, @in6=@mcast2, 0x4e23, 0x9, 0x4e22, 0xfff8, 0x2, 0x20, 0xe0, 0x11, 0x0, r17}, {0x7, 0x6e2, 0x1ff, 0x4, 0x8, 0x1000, 0x8, 0x5}, {0x8, 0x4, 0xfffffffffffff26e, 0xe16}, 0x4, 0x6e6bc0, 0x2, 0x1, 0x2}, [@algo_auth={0x12c, 0x1, {{'crct10dif\x00'}, 0x710, "ae37dfef3445343a706112f5f04170b424ddf9ff293d9d490219b1652f1098ff4650611d319baa2d4b54a4db950e7a64e6638e74b29c1407920586918514d056d72c267a973715c323584c02b9b19109af5c7448655879ec235b1ad244c90ba31132808974ba2509eae0f85753ce3697ab638228291daea19d52105be98f60c819aa999551f7ae4f69a092a3366169dad9d3424014de01dff573cff7948c0ae4648aa6a54aa8bced9f647f60647a2c068ac896c83c78592cf2a5ca19d7fb0fb4cad2b8110b1446bb9d9eb79324f20a12d3554fad9fdd785e822991146270871e9b75"}}, @address_filter={0x28, 0x1a, {@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0x4, 0x81}}, @replay_val={0x10, 0xa, {0x70bd28, 0x70bd27, 0x80}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e22, 0x4e24, @in6=@mcast1}}, @replay_thresh={0x8, 0xb, 0x1}]}, 0x240}, 0x1, 0x0, 0x0, 0x4000101}, 0x875db95d9347089b) 20:21:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x82000, 0x0) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000140)={0x800, 0x10001}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r3, &(0x7f0000d85fe4)={0xa, 0x4e23, 0x3, @rand_addr="00ff0300"}, 0x1c) r4 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r4, 0x11, 0x65, &(0x7f00000003c0)=0x800000001, 0x4) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/d\x00\x00/a\bdio\x00', 0x80400, 0x0) r6 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r6, r5) write$P9_RGETLOCK(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="290000003701000040000000000000000200000000000000", @ANYRES32, @ANYBLOB="0b7f2f7d65762f766373612300"], 0x29) sendto$inet6(r4, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) r7 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x5, 0x2e660a29c033dfaa) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r2) recvmmsg(r3, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0x0, 0x0, 0xfffffffffffffdcc}}], 0x400000000000490, 0x6, 0x0) 20:21:51 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) ioctl(r0, 0x6, &(0x7f0000000300)="c81b81a57bc04f0dfac3fc209662485a82726819dd34b786c7c39f4ea988794a2822e14c67d9dffc3db0e2a0421eb7b5e6365b7bfb3733bcb0199d17114903224db0df848146cc25c34f2fecebf88b768120630c9de7c5b37741243c079cfcde3db5890a33c2266cd46f7a864d1866e4abcacd2c69fd5ae5dac39d4b0d8771e1993712e85807b098") r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="f3"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0x0, 0x1) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000000)) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {0x0, 0xe}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendto(r0, &(0x7f0000000540)="ec4b966c2cd60e44365ff00372ce4c9a198c3bf3d3b8a5c7ba21c5f0d1412accf2bce0b81fca8f8ebc4149d4d8b585b02e21fe7846f9b4b2e923a157c6821d361fddda3e757fa1881779bdf85b48be8dc9e69add7fdff01ec8fbe42da2a789919652e8cf66d7da07e03f5724e94f7008dafb424d902e5dd660a2ba976461194f5dbad31fd12bf7602fdffaee1a520c349d57f3c5795f58de8fa88700a1a2e443f0a22a2e18196c75478060bb85723f1f7a5879", 0xfffffffffffffc42, 0x87010, &(0x7f0000000600)=@sco={0x1f, {0x0, 0x9, 0x40, 0x91, 0x0, 0xfb}}, 0x80) r9 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20ncci\x00', 0x1feaf757a5f84ac7, 0x0) dup2(r9, r3) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f00000000c0)=0x2, 0x1) 20:21:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/context\x00', 0x2, 0x0) dup3(r3, r4, 0x40000) r5 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r5, r2) ioctl$EVIOCGPHYS(r5, 0x80404507, &(0x7f0000000180)=""/192) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r7 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r7, r6) r8 = ioctl$TUNGETDEVNETNS(r7, 0x54e3, 0x0) sync_file_range(r8, 0xf57, 0x100000000, 0x5) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r10 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r10, r9) setsockopt$TIPC_MCAST_REPLICAST(r10, 0x10f, 0x86) 20:21:53 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) ioctl$KDSKBLED(r2, 0x4b65, 0x10001) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) ioprio_set$uid(0x675db39b8ba0a79b, r3, 0x9) 20:21:53 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040), 0x4) r2 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r2, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r3 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="dd", 0x1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0x0, 0x0, 0xfffffffffffffdcc}}], 0x400000000000490, 0x6, 0x0) 20:21:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/context\x00', 0x2, 0x0) dup3(r3, r4, 0x40000) r5 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r5, r2) ioctl$EVIOCGPHYS(r5, 0x80404507, &(0x7f0000000180)=""/192) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r7 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r7, r6) r8 = ioctl$TUNGETDEVNETNS(r7, 0x54e3, 0x0) sync_file_range(r8, 0xf57, 0x100000000, 0x5) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r10 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r10, r9) setsockopt$TIPC_MCAST_REPLICAST(r10, 0x10f, 0x86) 20:21:53 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="9097940ce871cc9909db5993beea57355aa4fe26162d3c4d4018c008f4f877bd1d0a2a392db33cd9e0091bbc516ea8dd411ab31b44cc33750c7c7cc2d2e87ee85c58ffa99b94af1c628bdbe18abf741c20e616fe0ecde86a28aed0ebac82b9c3cd7970121a660b4a01fe8b78ef58eeea940025dd9fe8f83f185ff606de85194dd1f980acfc25b6589bddb67c9ea0f82f445d472aecea3b79343f9c2b9b13a98bf29467d96685fa02fea33542"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r4, r3) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000000)={r6, 0xff}, &(0x7f0000000040)=0x8) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:21:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000180)=0x6, &(0x7f00000001c0)=0x4) 20:21:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r2, r1) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r4, r3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r9, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r9, {0x0, 0xe}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000380)=r9) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000040)={0x1}) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r11, 0xc0406618, &(0x7f0000000400)={{0x3, 0x0, @reserved="947622277f8fffad8aa7e80109bba8643c8c50f39f81c8be3898a9b57291b364"}}) r12 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r12, r10) r13 = syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x2, 0x101000) getsockopt$packet_int(r13, 0x107, 0x10, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$EVIOCGABS2F(r12, 0x8018456f, &(0x7f0000000180)=""/202) [ 354.885224] sg_write: 25 callbacks suppressed [ 354.885258] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 354.885258] program syz-executor.0 not setting count and/or reply_len properly [ 354.893816] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 354.893816] program syz-executor.3 not setting count and/or reply_len properly 20:21:53 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x4, 0xc7, 0x4, 0x5, 0x2, 0x3e, 0xffffffe1, 0x22d, 0x38, 0x37a, 0x401, 0x49f, 0x20, 0x1, 0x3, 0x3, 0x9}, [{0x5, 0x5, 0x2, 0x80000001, 0x6, 0x2, 0x6, 0x6}], "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"}, 0x1058) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) [ 354.958141] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 354.958141] program syz-executor.2 not setting count and/or reply_len properly 20:21:53 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockopt$inet_buf(r1, 0x0, 0x2a, &(0x7f00000000c0)=""/114, &(0x7f0000000140)=0x72) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) r3 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="dd", 0x1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0x0, 0x0, 0xfffffffffffffdcc}}], 0x400000000000490, 0x6, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000040)={0x2, 0x6, 0xffff0001}, 0xc) [ 355.045354] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 355.045354] program syz-executor.0 not setting count and/or reply_len properly 20:21:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000200)='irlan0\x00'}) [ 355.129325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13812 comm=syz-executor.2 20:21:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000180)=0x6, &(0x7f00000001c0)=0x4) 20:21:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)=0x5) [ 355.206778] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 355.206778] program syz-executor.0 not setting count and/or reply_len properly [ 355.279980] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 355.279980] program syz-executor.3 not setting count and/or reply_len properly [ 355.315024] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 355.315024] program syz-executor.2 not setting count and/or reply_len properly [ 355.345764] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 355.345764] program syz-executor.0 not setting count and/or reply_len properly 20:21:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000280)) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000400)={0x1, 0x1000, "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"}) 20:21:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:21:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000180)=0x6, &(0x7f00000001c0)=0x4) [ 355.492068] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 355.492068] program syz-executor.0 not setting count and/or reply_len properly [ 355.512931] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 355.512931] program syz-executor.2 not setting count and/or reply_len properly 20:21:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r2, r1) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:21:54 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="544c0660d7b2b77fbe7a8ed3740c98f064d05a8b468022a75433960e2c57d88c0fcd2c135158315e0ef735d37167a472fc2100055d680b8f021c4b7e7ade3e94d037ea"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x2681, 0x1e50dc0abe2d2671) 20:21:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000180)=0x6, &(0x7f00000001c0)=0x4) 20:21:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_settime(0x6, &(0x7f0000000180)={r1, r2+10000000}) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:21:54 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="64bb4f6e8d23bc5d64db75ec9d6c5fa5614c1494864e6777798bc60bbfbc35a036791e824193e67c102c37c111f2adcc0eeddb766ebb45dff3c85ee5708da86eae2e4d3c9180a70ccfc9d560324ada08562f3564cfe8761e47542b090355c2e78e13c13c81e01ef81da2"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:21:54 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r2, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r3 = socket$inet6(0xa, 0x802, 0x88) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x1, 0x0) ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f00000000c0)) setsockopt$inet6_udp_int(r3, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r5, 0x4008af14, &(0x7f0000000140)={0x0, 0x3ec}) sendto$inet6(r3, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="dd", 0x1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0x267, 0x0, 0xfffffffffffffdcc}}], 0x400000000000490, 0x6, 0x0) 20:21:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x20, 0x0, 0x0, 0x7f, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x7}, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x4000, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000180)={0x8, 0x9, 0xfffa}) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:21:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f00000001c0)={0x5, 0x3, 0xffffffff, 0x8, 0x8}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:21:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) 20:21:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) r1 = socket$isdn_base(0x22, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000180)=""/131, &(0x7f0000000240)=0x83) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000880)='/dev/cec#\x00', 0x1, 0x2) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000280)=0x85) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:21:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x290000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000180)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r2}) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:21:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) 20:21:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x405) 20:21:55 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x102, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x20) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x6) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:21:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) 20:21:55 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) r2 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x6d, 0x400000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'bond_slave_1\x00', 0x10}) dup2(r1, r0) bind$isdn_base(r0, &(0x7f0000000040)={0x22, 0xff, 0x1, 0x1, 0x3f}, 0x6) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r4, r3) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x10, r4, 0xb) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:21:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x405) 20:21:55 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001600)='/proc/capi/capi20\x00', 0x8c82c6552f81f028, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000002680)={@vsock={0x28, 0x0, 0x2710, @reserved}, {&(0x7f0000001640)=""/4096, 0x1000}, &(0x7f0000002640), 0x2}, 0xa0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r2 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r2, 0x0, r3, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:21:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x8, 0x1c000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) lsetxattr$security_selinux(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:default_context_t:s0\x00', 0x27, 0x2) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:21:55 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000200)={0x0, @time, 0x9, {0x81, 0xff}, 0x2, 0x2}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'U+', 0x5}, 0x28, 0x2) 20:21:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x405) 20:21:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r2, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xaf}, 0x0, 0x0, r1, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:21:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) dup2(0xffffffffffffffff, r2) 20:21:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:21:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) dup2(0xffffffffffffffff, r2) 20:21:56 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000300)="9c179a43b0cd3fa21b255ef2cb471c87ba119623b26a8103c0742ee865f5d6e900089156b519adf21cd765fa176414a14122a5275e9889cb201fa459f218b2f57a390934b64862ad6c9e993bfd37951452effb4a659a581df56ae5fa94e4817a82d53a773118e54662058a90891b1d47e8b248f8a4fcfc26aa7570baabf89b293ac8909f5bee5110e12f1304548d62bdbf75294aa68ae40686e36be0a5a9425654a76ad631ab16bc094f3166b4b552ee37d1f77fce0068e4530458d5c97daf74ac2e2da2508ee1174373036aa90863bafa618d3381d5a0fa5a63b051ad29a3e9d713f03ca6f27f7f55421ed4e13a", 0xee}, {&(0x7f0000000400)="7689c14d40a0af1611ec01cede813ae25f6d4cd5aa4d1a2fade8e366c761ab1d5747f06d18ec051ec916ab33e43f2f95bb86513f62f3b0fe2c1698dc349a7e9ca99da8613754377f1cb342479c65e7eaa66a6560470ad6901040bb62aab942221939de2295c61432d8454eb9aa5fe54918936271f66c7655ac0847fbbe33f92ad1", 0x81}, {&(0x7f0000000000)="e98ef30b66bc454441b9b69d204886a20ba39c8dd9db70b05d8284078e1597ff33a1088fa0aaa1d7c999faad234684d6ed0a07addb1601efd2011ae3637597e98203481a1746673a261cf66133f2f7842c6974745521a353435cee087c661727", 0x60}, {&(0x7f00000000c0)="a1a54331a16929ed71ceafc17c38b4", 0xf}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="e285eadcb0e1efb768956627610b412602a982622e9026a5f6a32d5ccecbb439adbb01a3f587ab164901dee01ca38df071432f30c3c6f30d164683b63b59bba6c43348fe2ba0c8ec854dccc711f55fdc1ba80192a706797219426addde5ba511733eef14f1e3d289", 0x68}, {&(0x7f0000001540)="b6b550212d738b756669ae5c668b6ffbebdeee2c1d85f80c83b3fe0623e7f06f3423107ae5d03a0456a530f54a13296d9578fa7586a293b15f6dbddc821d113c8e722cdb216f3041cebd289d7b3c3ab03e1c4f3207c4ba84a9f76f1b1a67436caaa27d444c0bead29da39e39f4a9772783e6e4846020e7e618b4e43f0de924bf604bf6d3edd1648aef02d9c4f6156a006796b35fd604296f7929eaff417cbb657ae2c1c5b66bd0c30d68a2eaf71ed37e5a1624c0ecb216f202d1859f04adc4e7ac1c755f716253f7", 0xc8}, {&(0x7f0000001640)="ba62c3764085f9daeb040c129739fd7a5e41bd0168ee3e09a07d56558e7750b7a2ef2a598b198ccb9106ac010a43a19cffc2f25aed6765214cf3d5cf9cd667da39f0714086e4df760d424b1e5184559f934aa3fe4173cf2a3d98c01b5b30e2ad8ef2c223b817adf5d5cfd9f45e812244c2ba7bdf2bec71aa7d202a09db24986cb357699e45b76536c0bffedfdcb716e49a8a18b5bd23bf2357574d3ec86463cc47a2c5624891d286481f087b9f7fa020f7d489eb1e3143c3aab4ea7e660948075eb950d2e749498cb0ccb45e232d51771192fc5447ee7e26cb6ee3b9ce79", 0xde}], 0x8) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) 20:21:56 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x503002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180)={0x2a9e095c, 0x3, 0x1, 0x1, 0x3}, 0x14) r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r1, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0xc0c600, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb636be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000200)=0x6) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)={&(0x7f00000001c0)='./file0\x00', 0x1}, 0x10) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r4 = syz_open_dev$sndctrl(&(0x7f0000000300)='/dev/snd/controlC#\x00', 0x0, 0x501201) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000002c0)={0xae000000, 0x5, 0x6, 0x1ff, 0x7}) 20:21:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:21:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20048}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = getuid() syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x81, 0x9, &(0x7f0000000840)=[{&(0x7f00000001c0)="a18968f71c2a448a5c886fbdc793e21115d71b058c37c4aad7959ca8ee23bce4b4f7d84e8cd80231fde0c04975a65e4a9e9d033733910eb55a3aef1968b275945c49d7e04b04e8d369d2afc0a29b8b6a86961d5d2fb314615613dcdf25eb397e2b478c8e3e40d740c2c5e995fc6815cdc832986dba51d7d42a4acd9e15479703e59d461e0a50c22b2c34d6e46a6d2be1da5029dbe68120f796d019ee5ce1d370039364003bfce3110d6b11ef52e5ae330539ec9f22", 0xb5, 0x8001}, {&(0x7f0000000280)="dc37274a0d42c158fa8a1f40c97ad4747f3ee5e238b5b499cf581a2629f90d76a573b9a100631927f5f8fa4250832164a04a6e44ed3e4f51ce813f9b105451c7bb0f4d0ffab355361a6eab40769eeccdd1bbf4bce88a180ad98614b91a8e580829d6d2ae4920cde76d90cb0cdd40ded00c588527216b14c4c85cbe0d288793be4e7dec598bd0aacc4b2f3705769e3c5b2e6911d944e4111618aac5b1b1165f8a23f6a55f61cf50aab80bdf314886e0208b65aedb704398e34eed2b821b5d5cda1e12d02560922c777cc21887c6adcf38cb82c6d60799a58041e77c23adf4755ad7d10ee16eff", 0xe6, 0x1000}, {&(0x7f0000000400)="6154b3d8557d1c14c60ce37c7a96a555126edd9b67c9fc9dbcc9e42b2114e50e7268821c76547e094ea21d2d507f454478a2db9c50a74001a277c91ace12c58b52f79e9775902fda826f8b62fdb1e59062be9c59195b65e8ad94c0c8d88f2b1ed986e568fd8451dd36682cf1338b5a737502bbd41d46e2ca489a0b6690ea296f59ca98fcb5529fb225ea1e247bc3126f43494c974385a49183ba922738ee5cfb34ce373dabfa0bfa13583d93a6607b5feb10", 0xb2, 0x7}, {&(0x7f00000004c0)="a07533346e78aa419b39cec164ee06145490a07cd936a99d05405d872afd1c9b154bcdeccb9004bb25bdafd35c94233a2dd7fd08a12e6045cc27cb9db6529d8d53aaba2be3509000c45e682c3e9eb3fdb73284076d", 0x55, 0xfffffffffffffffc}, {&(0x7f0000000540)="bb5dec06cea86510920e6adf370f33d5844e7490f42ff8c0292ca6754e2063945ecfcb7acf520334e9b26f597d2cc62b8dc1219a0e9a33bd6fa75ec3fb32fc75cb2cbe937df674ed04ca3e95c4d545b97d2ae9f99dd1ed3d2311fa11ae2f753f46aad7c0876dbbad5fcef3b4e79e0dd3fb7b9aa0b4328f89f79f14cc8339fd196cc7a81ee56075ffe576108db7918582d4f55f05fa2e378c4024b6431b47375e50421482037e0a444d4931a7058ddb03ea6be7dcb42f4dc3c781d3176ee717e132d574a5209c7dbcb707b5f68a687ff23ec1e4f7d359f6735f4e523811163aa407616e", 0xe3, 0x2}, {&(0x7f0000000640)="8faedd011081c869b638195c6b4243dab3f76abdcafc8e486c089663cc8d4eebe4528e5c6ba87c9facd93251c3c36c6c2d7daf5c70c601fbcb37a97bf6a69061f7283c2528fc3ade10b3f6f2fff8aa448a41685e9bc614e39d92c59c3fa070d1fb129c50af198a9138a10ff78c1a4316381c312b9f42563af4cd24bfe5d24c967a7d2e2483f448954cf5", 0x8a, 0x10001}, {&(0x7f0000000700)="38454dd49ef364ba834555144a97b364f9c92cf4ee363381e2125a904835ace6d1eceb6a828a20ced3be63aa1aab9cac18cc893c86ab4174360965b8c24bec7c23d4bdce3205f34245197733204b6b14", 0x50, 0x5}, {&(0x7f0000000780)="ca9b608f2cfa50028dcded2383c27c771e0b48526e941d8a76bc11469e1bb9acfe0a3def05c99a5fa156d2718f1d092c6b4ecbe4ed8576ecc52b22b803a39cfca9123d0237ebf025b0158668c418b4f8a71e1c54c72891ea2c83b904e93c29a234b11d2506d52e1ff4d9dc7b9ac832ba6d22d65088ab09e9aa959d3979129ad017cc090bf95db17b0d00346b777698064a75", 0x92, 0x1}, {&(0x7f0000000380)="64002390cbcae8fc1d7f0efff30cc89e91b9e1c3140f1c47f20cd7b36232eefb1664d30ef63902feee40b4fc", 0x2c}], 0x2000080, &(0x7f0000000940)={[], [{@appraise='appraise'}, {@euid_lt={'euid<', r1}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@obj_role={'obj_role'}}]}) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:21:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 358.122647] XFS (loop2): unknown mount option [appraise]. 20:21:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:21:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@generic={0x1, 0x9, 0xd8}) 20:21:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:21:57 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x80, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f00000002c0)={0x9, 0x1000, 0xffffff81, 0x400}) r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x3, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r2 = dup(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@loopback}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000040)=0xe8) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:21:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:21:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:21:57 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x100a, 0x3) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) timerfd_settime(r3, 0x1, &(0x7f00000000c0)={{0x77359400}}, &(0x7f0000000140)) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r4, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r4, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:21:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$VT_ACTIVATE(r1, 0x5606, 0xba1e) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x300000b, 0xc7d, 0x4000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000040)=r5, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:21:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) stat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x1, &(0x7f00000003c0)=[r1]) r2 = syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x80, 0x208400) accept4(r2, &(0x7f0000000400)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000380)=0x80, 0x800) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000780)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779a05c5c5a09000000ecf323c935ba26eab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc082b7bcdec844f667da0860700000000000000000000000000000000ebc53db0f533e8d15d34bf", 0x82, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000600)={r5, @in6={{0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}}, [0x8001, 0x9, 0xde, 0x7, 0x1fc, 0x9, 0xfffffffffffffffa, 0x3, 0x81, 0x1, 0x0, 0x3f, 0x2, 0x40, 0xae]}, &(0x7f0000000700)=0x100) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000040)={r8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000000500)={r8, 0x7a, "8ea33b56388f94610df72f01b79af9a9a8619dc35b5fdad7fd387edcf79b301f8d742d7a860b0ad9ddd5f0191baf002444aea9ba574da23d940dea2d78694d064d8dea79d2bc2fc8af4879311854b1e3dae20d46eba098ddc20f4ee7a773c1c88ec5785c934a7963fec654148457857caf6841d76e7f78d4a02d"}, &(0x7f00000005c0)=0x82) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) getgroups(0x2, &(0x7f0000000280)=[r1, r9]) r10 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x101000, 0x0) ioctl$PPPIOCSFLAGS(r10, 0x40047459, &(0x7f00000001c0)=0x400) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r11, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r12 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r13 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r13, r12) ioctl$PPPIOCSDEBUG(r13, 0x40047440, &(0x7f0000000480)=0x100) 20:21:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:21:57 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x1, 0x2) open_by_handle_at(r0, &(0x7f0000000880)={0xf8, 0x7ff, "e16f07ce2a309f2c6c3ec6bebe6fced022b6dac188c5b119c4607b00076f6547d96f5a497f7fcc38a2a258095543ddda5c2611bb8a366c53ad6ad09c876f9ef4b20b4d9436b46322cde53341ecb6a1a10e0dbe0d2f670999727fe006c425eaeb1ac1bfa146dbdbeefee203fbaf6b45021dce60994bb85a46b3b3c56c12559dc183b750b7bb9977aa10d7d79ec8c06722d2871e6216567f30ad4d7f182cbd7c81cab9ef6dd8b52b5436f8cdde3de445c4a9de439825defd36a5fa57f6c06d8ca26689e4976c293215d4fe2bc067490f9c697d63bded36b5ec0fb58ed3989d94fa209bb28f6616853db26046c75c3352f7"}, 0x180) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r2 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sysinfo(&(0x7f0000000000)=""/121) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000980)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000159c91887c73d25dc3cbf50d816001dd75a5741de6be7eb941374294cd545aebca776b435c463940615f70b3b04ead81a45465d9ec888f89d96695e8f282945a1c5474"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000700)=ANY=[@ANYBLOB="b800000019000100000000ebff001700ff011300000000000000000000000001e000000100000000f8ffffff000019000000000000000000000e20fa0edb4a410979f69f5e8f2389e54c49cdc216f41a9f72aec52b3ffe2cdf1695cf3f0c19d35dd43cdb71663f1438d077784e578d418d033a9415bd06912d30cf6b5e38369b28349b2248f6ad1af1e0b813df95f215788cabe40ce8ccc46b7503add2f4d9beba4dd55f7ea243405f2742c54976ad9ca5704de7f1f8fc026496b63bc842b1c5e54deb7ee2261283901ed66770162923086351bee01274a83e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000005200000000000000adf4d3536addeaf4000000000000000000000000000000000000000000000000000000000000e8500000000000000000000000000000000000000000f6ee301f408495efb48133cfe2c99392000000000000000000000000000000000000007d0000"], 0xb8}}, 0x880) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="24fdaafa118489004ea7ad6b81836b526f5fc033be7864ca456860bb84450cc1f705bd80433af2fc8ef00eacf5e5e452560c207ac0499a3fa0b13ef7f2f6be7d0f9891139d61fa912e0bffc28fc30e376f1b2621e9537608c46434f249ddb49dd6e33fa282fbed7a11a463cbea537e7c51cae053d599eb64bfd7f6fd5cd288e7df7b2e14dea8bae69ab9f32e153e8ff6a9ec5cc68cd8be331943dd2a560ba700f7f81759d7a8edd91c2f6374cbad6f6f2971f6b76a43c78f8e73e690d010b4a1101a31044e2f292b7c8da10606b0e685c2", @ANYRESOCT=r3, @ANYRES32, @ANYRES64=0x0, @ANYRES64=r4], 0xfffffee5) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) r6 = msgget(0x1, 0x20) msgctl$IPC_STAT(r6, 0x2, &(0x7f00000001c0)=""/181) msgctl$IPC_INFO(r6, 0x3, &(0x7f0000000640)=""/163) write$P9_RATTACH(r5, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r2, 0x0, r5, 0x0, 0xffffffff, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r8 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r8, r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r10, 0x101, 0x0, 0x0, {{}, 0x0, 0x8001, 0x0, {0x8}}}, 0x61}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r8, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1c, r10, 0x202, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r12 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r12, r11) ioctl$SIOCX25SCALLUSERDATA(r11, 0x89e5, &(0x7f0000000400)={0x38, "5fed3959dbec250f8d8fbf167b8feb6a81b0ac36cc1e4f55793cb998fe8d7e6b6ff721a5d46b7f875e508f8bc7f4b7e8bf012dd61d842e344f4d9b112f5c4982d86ef4db9cfafcdeca498ec5e8edb375540553453f89bb4f643cb06434c6d22e1cc94f9e6865d11f71ec32c7def322987db856d6e9790a97eb2c9ac193cd3655"}) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:21:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:21:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:21:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:21:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:21:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:21:58 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:21:58 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:21:58 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000000)=0xd6c2, 0x4) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="d3b957ae3ced8bb5355c7e5dedea0f23576a1eb100424e57d3527a25e0aae61161db8f46d4480e6ed10a38511dc88a5235a999755866ba60eeeeb799b8ff49cda6ca2ac4b77d5b553cd0b346663d37863840ea2c277c4005cbeec8de8c0c44271bb836969f6d815f530e2e1c962f26648f3cf1a5c249bd976d7467fe19fbccf690982f049733405a87e1a17a56a59c35b09e6164b743733a8667e9e5a1c01dac157ff8e724a96ff5acfa53e81a29477718b95ffbde0b0828a2669394d43b28f18d062bff15cd0d94638e60da1ee9d9bebf5f97decede84ae23bca351b66f6b64e8aba3db368576894dbd5d7086770ad35e51a0b9"], 0xfe4e) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x101000, 0x0) write$P9_RATTACH(r4, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r4, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:21:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x844, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) connect$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @reserved}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000180)=0x400, 0x8) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:21:58 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f00000001c0)=""/79) r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r1, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x4000, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:21:58 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="b806b25e6938d23d468b53b6ec0cf3530d7b61d8b006f2e70747a5e360dac23b903e100338a44df586e00433e6e7fe0485b8969d18510cf07ebed39aeb2f8fa23b81191e8a1b676b0423b199f490d541a677ea851e1a"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r6 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r6, r5) ioctl$VIDIOC_G_FBUF(r6, 0x8030560a, &(0x7f0000000140)={0x8, 0x5, &(0x7f0000000040)="463d36830179cacbc833b46ecc0acbdc4887e398834b1208881246d6d745d9fd98bbcd14584af0884536", {0x67, 0x200, 0xb1262ab, 0x7, 0x9, 0x7a2e, 0xf, 0x80000000}}) dup2(r4, r3) ioctl$SIOCX25SDTEFACILITIES(r4, 0x89eb, &(0x7f0000000000)={0x2, 0x7fff, 0x1, 0x0, 0x6, 0x19, 0x2, "ab3847ef8fee3ed3f27708d7b159d19dd978a519", "a11b3fbcf3530176ad8266b5e13e007f57d17861"}) openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x280, 0x0) open(0x0, 0x0, 0x0) 20:21:58 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:21:58 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r2, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r3 = socket$inet6(0xa, 0x802, 0x88) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r5 = getpid() tkill(r5, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r5, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000080)='ramfs\x00', r6}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000040)='cpusetbdev\x00', r6}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r7}, 0xc) write$binfmt_elf32(r4, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x1, 0x4, 0x7f, 0x7f39, 0x3, 0x3, 0x0, 0x39c, 0x38, 0x347, 0x10000, 0x0, 0x20, 0x3f, 0x3f, 0x1, 0x292c}, [{0x2, 0x6, 0x6, 0x0, 0x80, 0x8, 0x9, 0x6}], "f372b85b3cc373a46acbe1bab4b4e8e0f70d7487c26760ea620bb766375c58c65f720c3ee524018d361b58a53463af2ca39635b639008e628a93010610616f9cdf80447a1e17aa03d54f880410a2fe44fa46f1cedcc5c99e11c057abaa0817f42c05ee9d6bcaba50b6577a54495e8da6ad7c8ca8b2b8e2505de21f5612086259b83ea9594a5dfffcc2cbacdd3588600e707c84a521e0cf08a67b2c2e97f2327fc1dbff6a209a593f55a074b744ef6f467cd4a9d398ee269335ca7a408b39216fda268c61cbb53cb269b0553e8b69e81f27f9abe70d8e4a569d193b48d310378bfd5881c477634ed7d7bf7d55d713e408b68645f45a922a932f0778951cc14f962ca7df68cba67dbfe16299eb8399afd0e49c31aef35bfddd05325fe88d3a36ee6455797f3b357698e7758ae5d025bfa8a64249f357015229c7be4990526d85ee89531f3223adcd6471b2626e2cda3baf2e529239c3cb1b0c9e1642f5e141ffa0b6b35983dc17f21d0e1a7b1df24319fc8ae5adbbd0e6a0261353fe56816749836994366c2c75f85a734528da6ea5f5344c834079c46257fed947cce749768a350d0bc3b168988d548c22b76463cef6945abff115de1e93bf773961a6168d8b1eb969e44fd991b927798e918c3ee5a089f7cc2c1f09e6b37b5295010077c4f43f8ce273b7b60c00bcb1006f11ff45ad635d022533aa2d0eb05395628f17defcfe524511a9cef1eb00898baec2b79ef365e83fabac7c51cfcab6e2e32e1737fd8d1b1d58873da3881a40de87676a2f6328d429adeb6faf04586578d879e9f54881adc7143d67a41bc921883c2cba7c26bfca251cd0d2b4cf6f0224457cf508112f21e7adcffd367086d880d1f6aaca21f7ae2a3a1cea3d015428c681b3794b0a796f962493e0d274d7416cf932b93093ed199e4b706dbad783ee744c393cdd41d4b491fd5e906e652d4d624bdc8947ba847cfed99f7731369f15e4ce626c7ac2229a485d5ce0986f4a16f28eab05a434399b46119708bce2160a99e5a495a13e58c7a125767d09e37547fe733688d8d364bc108795988615a737dd2f060432c46e3f5d6d46ce036d6450c74ca77f862478d3fb18a997f58520ca03cc3afbd80ece8c75a07661b903397b0c216e97ff562486c704651688fa26337c275a77a2ba608155ed254ebd86dc18e2cdaf8ccdfeff07f3bb6fd091384bd1991d58ee09135267aa8de8774f73b1d19c0fc915a5d8f6cb5395a12afb1376b837685e31e1b8854c27aa765261d6e8cab2ab51d838f3b0bcb8897b9432fb3c958afc4ba03f1e1d4139d16e1d3a1e483650e37813778c702747cbc12aab7b044390572d1d89e87138d581b6b6694e45b99001c1a586774c0848042d4281be839d14480f124e289eced2b23d0c0017565c327453498ad58bdb081ae9d8d507bcbd13e6bcad130de16f7fc2f02e25daa1c9ef4192d4fac71f2e30734b6561c3e49db26e63340ba4dee1b84bf23b511dffaf5b8f0b1f9c62059ab895a95d153455cf7c0d99338c3fe307fa7fba721744ab26a28d27a025061863a78897525d6dda727a72e58d89cc5044189c8a61bb91c1d67f5bd4f7e16ffb9212560a39461a2a94b5ca26001332f41323dbd344b2155355409ed38e94098caffa12192656b93b61a22c944720baa177d1f6f120b0fc1dc4d1b7b7c8c7ffe9425d0aa323edaa216d7ccdd88025a6ae57d416c8f79b325384148701f83f80969c73f26cf3b8be760b3b437b0caf00e6e22cdce4ffb65800ef96470240a53c423c19421ff8e48405caa86cb0318b5f8a1dd967ab583e03551e08f0700468988adf491f392165c4ef869851ae0c961d61678b8d53e4d4abd9d72c5d730868454024f34f53af1e682798940024ac5ef52aa6c02e12b3408a7b5442b3957207f0fbf48f90174187be7c8855a9925965944575d1ed569bbfc1bda2bf21f16bb2019f4b5dc2347fe7dc5cc5a2ba57ad05b0fb713289b7c33c809537b62362265738b9bb1788f25b3fd848cf7c9b167649f58be29d1f61d6ad33d11e2e51b962451fc1943340c68359fbcdb6e12aa6c1db1a6793d04581f3969e7cbe7c45e37e591b7102ed7541c40b12eb8bed73b8e3b1c5ccbd46e944cec9a08829b78c1cb40060bc9e6ca87117fbf3ee8aece2e8425ec37d7b0e88605a172dba56ad207f27befb86d2e89a9257d44346e576360df9ecd9d05f61ffd6a36faa7e808859f73483e325aa6bb9d0d5a35749ee203b6fc230061312d6305b54c674c45a0ce849af82e9d132c1aa07e8bafd478f3bff60a980e8607bb77fbe3d1b29886bc9e87e8d2184c276e91c53b85ea45f70102356fc1090e357964ffe859ce78cb854addaf3100b4ab306dce6cdf8924f12444f57ee653a3fb43bd1fa099feaffeb5da43c3c7c6259336a3572be4487a64c9014df422e9563da30bda282141ad24d11b6218730d7ac79e9da7fc80dc1323189a346f6b14d2e95dec0baf3d95f672b2ac1024ded3e74c7d05f0f9b8705012a554cd43c6ea1d88d945ec8211318b7c042a3aaaf424705db86b2ab4d04399a372386a1a4cd6d535be8b1922e8928c75b6d782e4d7983754351cef38e61e6b6b9c40365a7346ac5528650b9862ea347df36237b15fe72432d54f5293fd8cb3f6cc6bd19d50e0c06aa9a6c0345eb0f1c507fab04c8420ac8a99af0a023020baf20bd77f415aa82ec4e043c012763387b8bcd842bbf4151b5d6a6e9ff1cedc47f20b8795a38e83ab20be2198f275774e792c5dac15edf612fce44531281c81b725594f0fda1d0c2d82a21c1d032800229656e817f9144cde1c19d643d895f71df7507696427382c48de03a19ebb48a3f9e855ebc99e2f6a09451dd01cf9cc222fe4c641374b42782011e63236bdce5923307b0fae195c30350bce5be1211de1ce98eae86586c9a9dbd52007a542ec80f7177c0705fbbf3f6f41d02a759e4074b4b5cf255bdf124641bb2d969cbd2fe90f6d46e0b76507f00832faf767b5791d2e33c11f65dad87cee52b5b54f416c9322ed8d45e4d8d194deef452dc4d78932f593868da5f0a2126929a871940fce808c3779b4ac78f8d02d5708d412a47fac279cc73d465bc655638b07023ec591b11e8c090128dc22ba6d73b5e90149249f032292268341473fdce64d03902eaa50873c3d137d1f269238c14674792fd7df723988c47e9022282577109bead971eb293423e25d743282e04ebaea6e964e98b53d38acda2fd96e1f451718dabce4cc0d8d88037db3ae9bac8a4759f07a4474a5b4445a51dcafc00b66c970ddf63cf02ee04f0b70965e7523c4afa0d0b3041eb180bac3fdb649edd54e028b1d4ffda7a0de76d173491d870d111a3d3124c2311365ba1a1d2606df7e9d90c2197bcd31dd70d76ccea822dd5774046102547a06ca46742feab24524efc7a0d85b4d00508e620bb5da1f741756bbf89cfff5f6853a513adf5be0e3be22b3a8c15b4047c68c5ebf425245ce0a82b88131411691d01ee44a23d737e8296407e0b82fed5941f083ce96efc54b0fe877d7ee27933a5a7145b4322828a112e13dfe479bdd68536b3fbeb383c0e1d7fecb610fb8d79ef10ce1ae7d1a45aee48ec2674911c60b352a7b17f90bb990083d63982a9aa2d75721a27d85a44d7586c5cd4c178c717c6dd91436c4ec95aa9181a8cb06fa3c671c65364ab433a8c2a65426654e5c1856fd07066c84612d205333f31e1e85ea712c8b671fae1cb5c13d99f44350faff7de6618f75683479563ceb4cf871e4375c9ccac8593cf39852fdb3787ca9a3efd4721d474d792baaf2b465c0f116769bc2b4065d886794ed65b5d2835194592fde06f38032f24563d1ecf01dab0f77d45e76fa4e7d241c2bc1bd5c386dd173aeaab3beac2a2efba8ccc718aa34a490b8204ed47610738791d8b53991e86bfef514c791eaf961ab20f9cf6ae91110ec1b8a90ef327d050f4a15456306ce9fd54988bc7d15e3d75a3d001c5843ac699336650f58bca19b3b52f86cee8a67285945f25f945fb5fba5cae0ae480c41c6476350efa762d8b4550fbdcf099244b5e06b2790508918a728652ba2f50f10d4e5aab10c3a3fb346b33a9b3f984a0bf8da69b77fb9136a9c61cb516dc8e04d34cb3e74239aa6e9c645e43961a2b4bdd66721278b7d19d4c9d2510d75c263184c5da70d86f3d80a4b2f7497c702684c0f65734362927d2efbb0b27573c7edc083b91c60f26cad9b4f184c42508981dfc48b45063be7d1bb4ccd3f09193160997025eeb574f932dc14e140cdbc8eb98290f29109aeb1df2bea92fba82e71312ee860f47a4e18ccca55428fde1c8212ab6c5133e117eeae74cf4ade5498fde4380fb6661aa7a1c739ba0e4367642339fcdc57ec785592265390618661e1e3c5798ebc939f64a44892dd2347ddc2eb4654dca3b0b7bb2f66165c7436e7bc9b6aa2fc8c7e5c3372ff0733edd74ab9655d59229af0e0db875239be004343d8a33074a69ab2c1d82136990ee9d751173a14f8daa548ac4e37d06bd65cef75bb0a6ebab713ce3d8dc1c8cd077295f8629c28b17465b3a4158d5f5c6c7850c7cbba2186d1fad79fcfc9b22b4bb172ef0e670b3ebb833702c281e115d0c96e882d9c82f3c4fce8e1d003400eaee41f3cbc91ae0a3d5ffa60d3bc46ac07bed3f5337c80d0f82bb445100b3a47c0d8f7b17bb2c3c687173ffa6dcf4abe0fb8137bcf392e212341afaadb656cd391fb0c9bb1d06bb5abbe601ad954cbf63463da0a800f58dd8c95773b4ccca29ada223a3c9a73cc317784d05b314f9ea93efe1d1647acfc5740f82e40a6edac6b25a78a7c4ac3690a7746153ada4956d66170edf3a2fd11c7ec590000399828ee7411f9b031630a59cdeb8d125538d7313ed9ca869a237cda403df63754b01085c0e61abe7e4d4e239a233b5f8e16da6ff66c9d37ee71acfc961e16bfdf5440a60fa713906015c61a613bb15659e3334e8d1603e0b8efb54009faf75b9d696ba75ab502d02be159585ae523735fe9d70ae000f295fe1fa9fa67e46d8054abc792dc7c569bf89bc990356b6f16d88e3936f8724d6a796973467fa37831661b6b9ad65bfb63055119f3ad6847eb91ad20b8a1d00426cd116adcda9973d5130b30e0d8753097993991e9d01e9f25ed2cf88d2cd6cb68adcba1b4926bff1f74fd19f3ebcddd3998595869a974d9452f55627cb603fb22792efb78c1de61bddba28211e5a4d75217dcf9ee1ed9d156925fecb950fb72db94f7dc9915618bf2b69ecbb45585b68c72e077597ef0f4b266bac66df9f7cdd759e9ef4baf19806fd28d1d0d5cceb6579c4bcacf9787fff247328dffa753eaec34908a6db513fc8a78907c413864681a1bcde78fe552a646936ed44104492bbeda999c116c2922b03527b7de7c76f8543126d11d601b89820db408330a2c43215619219b8a0d0b3edf8bb985e86a625bd284a72ec9b6a63bb347303c6345e328008744ddef954a17eed2bbcf9cc00cc0b77b1ca73bd4fa46925ab8379eac6b63141a098a148464af302873b8652487461b719129cbd1656ceebebb28acff48ad72c67b7baa591eb5aa9b29f377c39facf3e5e4a73722f83a11a799b774c0ae576170b9868395151d2235f9c6dc8a370d4f6029531de5bdbc41544809b3729cfe386f38b751ac319b9f1225ec148373179ac2f46691c5545ab828647e7e4ac15954ae13b6289787388b70200210a0041c503eea5858422552c24fc1bb1b03eb023d97a828cddc89faf7a3f395271f08a90b28", [[], [], [], [], [], [], [], [], [], []]}, 0x1a58) setsockopt$inet6_udp_int(r3, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="dd", 0x1, 0x0, 0x0, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r9 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r9, r8) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x3}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f00000002c0)={r10, @in={{0x2, 0x4e21, @loopback}}}, &(0x7f0000001e80)=0x84) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0xa5218bb25da9db29, 0x0, 0xfffffffffffffdcc}}], 0x489, 0x6, 0x0) 20:21:58 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="a59b7f803066290ad95c890dada405866ae11a62439a1332faf356444371f06bc5a3c4b01f5a2913891c50feb4cce9ae2e94d2"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r4, r3) write$P9_RATTACH(r4, &(0x7f0000000280)={0x14, 0x69, 0x1, {0x4, 0x2, 0x4}}, 0x14) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000", @ANYRES32=0x0], &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={r6, 0x1}, &(0x7f00000000c0)=0x8) 20:21:58 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:21:58 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r2, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r3 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="dd", 0x1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0x0, 0x0, 0xfffffffffffffdcc}}], 0x400000000000490, 0x6, 0x0) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x227, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x24300, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x3, 0x2, 0x8810, 0x4, 0x1}, &(0x7f0000000240)=0x14) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000280)={r7, 0x4}, &(0x7f00000002c0)=0x8) keyctl$dh_compute(0x17, &(0x7f0000000000)={r5, r4, r4}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f0000000580)={&(0x7f0000000080)={'wp256-generic\x00'}}) keyctl$setperm(0x5, r5, 0x10080020) 20:21:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(r1) prctl$PR_SET_PDEATHSIG(0x1, 0xe) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r4, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r5, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r7, 0x0) r8 = getegid() r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r9, 0x0, 0x484, &(0x7f0000000400)=""/142, &(0x7f00000002c0)=0x8e) stat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x1, &(0x7f00000003c0)=[r10]) fsetxattr$system_posix_acl(r2, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [{0x2, 0x0, r3}, {0x2, 0x2, r4}, {0x2, 0x8, r5}, {0x2, 0x2, r6}, {0x2, 0x0, r7}], {0x4, 0x2}, [{0x8, 0x4, r8}, {0x8, 0x4, r10}], {}, {0x20, 0x4}}, 0x5c, 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:21:58 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 359.958549] sg_write: 54 callbacks suppressed [ 359.958892] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 359.958892] program syz-executor.0 not setting count and/or reply_len properly 20:21:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x4020, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x4000, 0x0) perf_event_open(&(0x7f000001d000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x81, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/access\x00', 0x2, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:21:58 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r2, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r3 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="dd", 0x1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0x0, 0x0, 0xfffffffffffffdcc}}], 0x400000000000490, 0x6, 0x0) [ 360.048866] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 360.048866] program syz-executor.2 not setting count and/or reply_len properly 20:21:58 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 360.136126] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 360.136126] program syz-executor.0 not setting count and/or reply_len properly [ 360.177745] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 360.177745] program syz-executor.2 not setting count and/or reply_len properly 20:21:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 360.237862] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 360.237862] program syz-executor.0 not setting count and/or reply_len properly 20:21:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:21:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000780)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779a05c5c5a09000000ecf323c935ba26eab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc082b7bcdec844f667da0860700000000000000000000000000000000ebc53db0f533e8d15d34bf", 0x82, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYBLOB="bb0000003c279414857a847ffc16135e184452f72be04a6e9d309a5204dade4ca6fbefbca16730f427cba4841e5dc3a361aae52e525583405c1a636c82e194f04a85b05e2ab8daa8287c0a6364520a8bb603be5128d3355649a46115a2bc18a6389ba0129f8728f2fcf306b6ac99f07b8456e6b1758b9d3fcf5ae516b3500e3ac7ae60191ca689721a7d10735b5e4dd9bf6f12057225a3984d0881b3b5316116cfc831b3d3d91e4fadfb99cd065a7ae397f2f87493401ff7e5a76d74e64dab"], &(0x7f0000000000)=0xc3) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={r4, 0x2}, 0x8) 20:21:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x9) sendto$inet6(r2, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$usb(&(0x7f0000001780)='/dev/bus/usb/00#/00#\x00', 0x10000, 0x6e94766e81fb1dea) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f00000017c0)={@null, @default}) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000001400)={0x7ff, 0x1, 0x8, 0x20, 0x1000000}, 0xc) keyctl$setperm(0x5, r1, 0x4000000000103005) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r4, &(0x7f0000000780)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779a05c5c5a09000000ecf323c935ba26eab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc082b7bcdec844f667da0860700000000000000000000000000000000ebc53db0f533e8d15d34bf", 0x82, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000380)) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000200)) keyctl$setperm(0x3, r1, 0x0) r5 = add_key(&(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000400)="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", 0x1000, r1) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000002c0)) keyctl$setperm(0x5, r5, 0x3080a36) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r7 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r7, r6) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r8, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) [ 360.703262] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 360.703262] program syz-executor.0 not setting count and/or reply_len properly 20:21:59 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000000)=0x9, 0x4) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) socket$nl_generic(0x10, 0x3, 0x10) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:21:59 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r4, r3) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r6}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000000)={r6, 0x8001}, 0x8) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300)={r7, 0x7e}, 0x8) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:21:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:21:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:21:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 360.909620] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 360.909620] program syz-executor.0 not setting count and/or reply_len properly 20:21:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r2, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) socket$can_bcm(0x1d, 0x2, 0x2) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x80, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r4, 0x105, 0x70bd25, 0x25dfdbfe}, 0x14}}, 0x10) r5 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r5, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="dd", 0x1, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r6, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x3e00}], 0x1, 0x6, 0x0) 20:21:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) socketpair(0x10, 0x3, 0x24, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000240)={0x2, 0x8, 0x855f, 0x7}, &(0x7f00000002c0)=0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000780)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779a05c5c5a09000000ecf323c935ba26eab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc082b7bcdec844f667da0860700000000000000000000000000000000ebc53db0f533e8d15d34bf", 0x82, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)}, 0x10000) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r4, r3) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x57445b7c03c4b4ac, 0x48) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:21:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:21:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 361.086764] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 361.086764] program syz-executor.0 not setting count and/or reply_len properly 20:21:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x109001, 0x1f8) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) [ 361.178273] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 361.178273] program syz-executor.3 not setting count and/or reply_len properly [ 361.292036] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 361.292036] program syz-executor.0 not setting count and/or reply_len properly 20:22:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:00 executing program 5: r0 = gettid() tkill(r0, 0x14) r1 = gettid() tkill(r1, 0x14) rt_tgsigqueueinfo(r0, r1, 0x1, &(0x7f0000000000)={0x5}) mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r3 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r4, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r3, 0x0, r4, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:22:00 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000140)=0x9) sendto$inet6(r3, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x10}, 0x7f, 0x1, 0xff, 0x4, 0x40, 0x7ff}, 0x20) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r6 = dup2(r4, r5) write$nbd(r6, &(0x7f0000000000)={0x67446698, 0x1, 0x4, 0x2, 0x3, "d39ca5d18f856c1a03c07b4b047ddf34414d6b0a3711e60d2cd84da505bb67b7da2affac4df1dfb60f6d24cec132bda8a8b669378029fc9fd73ceca9ee559735333bb663002c87d318d15c0b0604f79ca67bb2fc28bca714"}, 0x68) 20:22:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000240)) read$rfkill(r1, &(0x7f00000001c0), 0x8) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r4, r3) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, 0x4000, 0x1}) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {0x0, 0xe}, {0xffff, 0xffff}}}, 0x24}}, 0x0) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000240)={r6, 0x1, 0x6, @local}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000140)=0x9) sendto$inet6(r7, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e21, 0x7, @remote, 0xffff}, 0x1c) r8 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) chdir(&(0x7f0000000400)='./file0\x00') dup2(r8, r1) name_to_handle_at(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x57, 0x401, "a2093ee65c6e17b6cf33af859e5feb700d3d69ac88e8f762ee2e50a34f2268fd2584aae1bc14b31bc3b81c433bf87316c627572b08d746ee9295ed2ac31b85c9c5c0e502a55f128d1dfed539e285d2"}, &(0x7f0000000200), 0x2400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f0000000380)=0xff) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:00 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) write$P9_RSTATFS(r2, &(0x7f0000000100)={0x43, 0x9, 0x2, {0x6, 0x3, 0xffffffffffffffff, 0x400, 0x0, 0x6, 0x3f, 0x0, 0x3}}, 0x43) r4 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r4, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @mss={0x2, 0x1b01}, @sack_perm, @window={0x3, 0x8, 0xf93}, @sack_perm, @window={0x3, 0x8, 0x6}], 0x6) r5 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r5, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x20008080, &(0x7f0000000000)={0xa, 0x4ea3, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="dd", 0x1, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0x0, 0x0, 0xfffffffffffffdcc}}], 0x400000000000490, 0x6, 0x0) pipe2$9p(&(0x7f0000000040), 0xc800) 20:22:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x7, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x8) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) [ 361.901645] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1 sclass=netlink_xfrm_socket pig=14204 comm=syz-executor.1 20:22:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000240)) read$rfkill(r1, &(0x7f00000001c0), 0x8) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r4, r3) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, 0x4000, 0x1}) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:00 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x101200, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 362.275428] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1 sclass=netlink_xfrm_socket pig=14198 comm=syz-executor.1 20:22:03 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0xa, 0x6) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:22:03 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000140)=0x9) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r5 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r5, r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r7, 0x101, 0x0, 0x0, {{}, 0x0, 0x8001, 0x0, {0x8}}}, 0x61}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r7, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x1}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40043}, 0x40) sendto$inet6(r3, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) bind$inet6(r3, &(0x7f0000d85fe4)={0xa, 0x4e21, 0x3e00000, @rand_addr, 0x7fff}, 0xffffffffffffffe3) r8 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r8, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) sendto$inet6(r8, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) sendto$inet6(r8, &(0x7f0000000080)="dd", 0x1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0x0, 0x0, 0xfffffffffffffdcc}}], 0x400000000000490, 0x6, 0x0) 20:22:03 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:03 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8000, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:22:03 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) [ 364.967555] sg_write: 17 callbacks suppressed [ 364.967565] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 364.967565] program syz-executor.3 not setting count and/or reply_len properly [ 364.978407] audit: type=1804 audit(1569702123.665:112): pid=14247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir891012259/syzkaller.MYfibd/260/file0" dev="sda1" ino=16737 res=1 20:22:03 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:03 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r2, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r3 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r3, &(0x7f0000000080)="dd", 0x1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0x0, 0x0, 0xfffffffffffffdcc}}], 0x400000000000490, 0x6, 0x0) [ 365.006655] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 365.006655] program syz-executor.0 not setting count and/or reply_len properly [ 365.022950] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 365.022950] program syz-executor.2 not setting count and/or reply_len properly 20:22:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) socketpair(0x2, 0x6, 0x9, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{}]}) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) [ 365.122799] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 365.122799] program syz-executor.3 not setting count and/or reply_len properly [ 365.139088] audit: type=1804 audit(1569702123.775:113): pid=14255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir891012259/syzkaller.MYfibd/260/file0" dev="sda1" ino=16737 res=1 20:22:03 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:03 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 365.264200] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 365.264200] program syz-executor.2 not setting count and/or reply_len properly [ 365.304054] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; 20:22:04 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x101200, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) [ 365.304054] program syz-executor.3 not setting count and/or reply_len properly [ 365.347621] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 365.347621] program syz-executor.0 not setting count and/or reply_len properly [ 365.418468] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 365.418468] program syz-executor.2 not setting count and/or reply_len properly [ 365.489666] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 365.489666] program syz-executor.0 not setting count and/or reply_len properly [ 365.616013] audit: type=1804 audit(1569702124.305:114): pid=14247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir891012259/syzkaller.MYfibd/260/file0" dev="sda1" ino=16737 res=1 20:22:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000240)) read$rfkill(r1, &(0x7f00000001c0), 0x8) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r4, r3) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, 0x4000, 0x1}) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0xe0d02, 0x28a) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:04 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x101200, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:04 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r1, r0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000780)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779a05c5c5a09000000ecf323c935ba26eab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc082b7bcdec844f667da0860700000000000000000000000000000000ebc53db0f533e8d15d34bf", 0x82, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={r3, 0x40, 0xf7}, 0x8) mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r5 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r6, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r5, 0x0, r6, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:22:04 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="b12927be58b6a712119be1b5d13a5965a195f7d05267c5c38dd735c54b264ea48948aba9845977ab5cd17b97232d60a91347450023e6b5abb21f5d3efa7dfdd1d6ec77ffc6f9663e8d42a6b3cad2c8b81624d811bc042f2cff3f050766661c"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 365.665561] audit: type=1804 audit(1569702124.355:115): pid=14255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir891012259/syzkaller.MYfibd/260/file0" dev="sda1" ino=16737 res=1 [ 365.736748] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 365.736748] program syz-executor.3 not setting count and/or reply_len properly 20:22:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000240)) read$rfkill(r1, &(0x7f00000001c0), 0x8) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r4, r3) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, 0x4000, 0x1}) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r4, r3) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000380)={0x9, 0x7, 0x9, 0xf3f2}) set_robust_list(&(0x7f0000001700)={&(0x7f0000001640), 0x8001, &(0x7f00000016c0)={&(0x7f0000001680)}}, 0x18) bind$inet(r2, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000780)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779a05c5c5a09000000ecf323c935ba26eab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc082b7bcdec844f667da0860700000000000000000000000000000000ebc53db0f533e8d15d34bf", 0x82, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f00000002c0), &(0x7f0000000300)=0x4) accept4$inet6(r1, 0x0, &(0x7f0000000280), 0x1000) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@multicast1, 0xfffc, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) write$binfmt_aout(r5, &(0x7f0000000400)={{0x10b, 0xe0, 0x80, 0x3b0, 0x28a, 0x1, 0x23c, 0x7}, "d0a3016ca3f8dfc13c8500da736f6aa45fec2e9d5c856b3decf2b08cdbc51fe28c0a783cf5c4fae8bd84af53026dd9428ad020ef89a8dd575f2503782947affd82052063fb3d836a4230428045c43fb4ddf01bf41b1d6d4bd7bff78547029539db62f26959752ec5e8e973c293b375b0f1be31b2c45e5f7e3073ea106d5d8b09dd5002fba7d6524a5a363e9011dc1f4bc91e70c44725e11d108e05ce079b3c2e73940d87a5e286d5e695812248154d9a1483dcf1ac7145ab8ef9e893dff15e16af1f5915d728989e446ee65d19c7fec12e6329330ac7e67ca7fa1adb4be2981f819c6f00f4a030271a678e7ca4fb7dc2f68e97d83f44a0baf3db55f859b8a237094709f983cc5e242c69fbf7d636e2b692542b01dd59a429b24236d5b4add0ddb56f6bbf63e3a8eb9282b79bec7ed34c312938dc2ca99e14fbf357a969f31b25228c18e509035228f8b223ac6ebfa32fe0269083f3b1e86de70d46064fc1096f9b694013a8197684a2ed2d245a57c897624597f42d7304fbef1beff81d6b93142fe92118ae9690aecc92b7a19a175be2a4cbba1201b9e46b5643628e0d41459651e4ec272cc66d79545edf76f0d3d84c6856114a96bb5d42d893ff68847f3a71d1d04e8a151b3a40fc3af1e72a8098ed72fed20bba7e8b3b9111a3e9c0af7710f42af38b49ff4c5721c1308e9804228b9da3701261733021d147204a27eeebcfce27761b3730d124d21edbf1e39dfc9728a8db57d76e7986491e57484fb71f41d126c170b2a55c27bf65aa11c2cd490aa9e83ee991dcaef020d42178f04fcaa71924de27d8dcbd71fa18eded489617fa2ab87808daabcfd680e297ab545ac474d2e192347bd27225f2e7e7ba76ba66695cca069c9914576377527908e9793a54a2db828cb8285cc2809f6ef266f7ad1ee550d8abc08cedefd4d00be1e94915dde8c52fb5508423279b98c4a7524cf622876cd80844991144384ce42778850cb3ae5bbf6abfc480462b4c55921cfa302b30028212e9759a6bb4e74b5f45b58a763e75fa7ae20dc8e572cfa2b5c5dffa412f64ee3bb02b1c5de5268f3829d433961faa2a15f5e74817b65369685f7489ff53ab19238c7cdb5f1ebbb2bbe242b3abb781beb27f700dbef42f7b70104d794da5fb5acb3799210421d941f6f35beccaa718e9338ac104c957ae51c5746d11c136b0fd1d6b7896b04d501146a6ebce204133b1fcd539cffb407cda6ee1361057c8fde2708e20fb256729bc9c6846971bd9c78a6a7f42ffeae52fee6587bdc56b7edab8ae35563d57b5d748d8e6821cd0abfe35e1ae13b5e6a2f87c7aa08c78f5047948226738f20a34e29f14695cbc928bc7808022bb1eb33166703e7f411d6ff9464fedddc3c070611b4573fdb00e6014511a31a8792466fd6b88e577a1982f42f988fb33c7781e29d45eaff70b764c251b8b1a011ea470bcc59d7f0b01219bec30f4c0d1522921aab5bceee89ae65acfa1362e3fc7bdd89a0fa2dc3c7b2f26aa898d79300aab9ed098183c20875e6d789886a3ca83f042c55268d9fa16e6896e182a4aa6bae2d61077f978b45f3de0e8adcc354e3d9d69cf2841f4e3a382f6c91c8a896b4fbf191a97c529250178e27e896d9515eb47ba8a123a7f69b250410317b01b462e321fbf07a7deb55165df905d01908af2c83770a2c5916ffe7c47882407108d7ee936c839a3d0d465004ad796adc4f5d95de5f21c9c15cfd0c6195c926319957a1e9506aa6f5ab8b996bf4b7bd208163a854010d00dab6aabcef4b0edfcdbbd9669f836094d712e8c7f81f471afd88057ee13b7ed7cb1fcee2dfeb8fe24d0b41262ddbca0ed160517b5cff6ac9bb4855198556e0048d9e819c6165c52b31fa3d93271bfe56fe892c6f16e9ca4037086f9f01d6e724dde1c1ac98dd167d437cee7e0d669558a92ae2dac0634982e2032efd199297ae058ed3d5f908b01d059b22a9dbb2481e42437974f3a7888cf0af9780eb3499508d5779e4f1dddd855a52f37ef6894cc082edb567df85aed4b3add4af789ce11cc1b4cc7139b908e7b6d0921a3158882e86b7c3d1fbe7a3a20dc495d7929b3a2a88507e5bdc948ba073be5f0fec50eafb8055c66eb9fe0e7fce25b946404c4f410f6187d25159a032a085e53923a1858a8f42d877b7af2e6cfabee727d0bf0b283edfea78283fa3d941611726222f55702e60db880b9c5387f468bd2c693432ddf6c572287ae15469a797745c2fa71b3734689f779db6877835c98c73f30dd47cae68a2bf63367249f3737ff1819f2cc2145e99266eea95d81d65573579c9c07d49594cfc999372959ff725c117c4fe668c9f3d3982f31c1300f206f0237cac75e20a066bef9c30601ff15a417de4b61d1285dd50bc8b6637c1f281f7ab4bbfda50344c1e0eb108438f2f5c0200801c789817b8aa7fc485cc4c9aba68b723ec977cc0fff34e8db05c38b2c087693c178cccd867fc73b53b64f1c272cab89d7492f21b7ada8efb7910243118db3240b6cd2c6487d5db6729c94b5fb278b02dddde917f2aace039ef9f65d29d8a9454593835853fff1591aa70289ef6f58543e926dd1b6d3d2dd4b295114c0a967cc3eb2889726eee2d229e84eb0b3fd86d2ca7f5fdef158eb29c9655241f301c076392ab9f97209aceaa516fd208e2513cf076e7d1e3317911fedcd2d35e9b750143d8a1ddaad499fc045d2ddde510bb17f7c97bf51e2b9eaf481e5e1d3e952e1c11c3ab0f0e791d55a9dc77688f805c285519940ee432663dd2f8a9b4a0709f6e40a458f5331f1c714833ea56ae1c7594a82e22077bfda1a33fd19b576f44862aff422eeae635e39ac71aa10bd043abcbf29c94e436cd69ca514a85b7f5416954055e0770a7734a502dc02cce08e08178135d8881f8d5b19ed45ee099dd69e3c1384c54966551169493dbed640baa3025ce8ed198b3e10c93a1321e3e77aee356604f798c938a172b2c4480cada825ad2cc14fa9a0154c037dd554f0ad0445379e2b73738d666cd2de10981141b4700db029bc18b8a0f48da6283a2c0f93f048092709558bd6b4d157586c14b807af4b93421cf774fd35f7b506e04b552313052333efdd49485b95536b0542799b2883be09e7203a1bddc53c7f3dffad87111fb45172df2a81aa150d3ab060f0be5fa692ebdfdb2423fa8afe3edd3d17c6f343a931ebab134b570a4cf52e29d6e6f7802c7752438e152157fdb372a925621b190821fbf1ab19789e520890c8849ececb503dfae3bccc571fb68715f4c1a0af111849bf5903a93557614a09b8b54461117bddfb92586589fa444f014a03493137c3d4b4bba00b054c1cf1633e0a1325780cb033185077e0902a44c78c1d3a5c49b9989415f11d720376196a09ebd48f48147c158b6637357071d807f53b1a5db65244ac156bb8924ea74e2ac41c7eeb45879b94db0b5fa8921c80a981d4626f7c8a46cab41d63df07219d5491fe52aae6d0a292cecea234855eb9be46367b5b9ebce8c3e19344c7c86b537c5d8dd39ae12623cf90134112c902db67e649a80e73e41c08b9896dc2bad0d11bbb8f237872bf40f13c8dcd364b8b32d6021229c7b99c6627422a20ea7cf4c429fba22b25a06aa262e935d27c55cddda3dbcf8d95b2d595cd4e14ad946ca3f52c7fd689fafa94fa693619dec469557b007facfda611059eccaaf6b69e366bee5fbf4f3d05f1608c22f82776a8aa60c54ce29221a966cded273e90841ce26d2c10a71a2652de7e9120b3a34d366048642307df8a11a3cddac67be077a07eae30af47afde1cb99e405d38537c81cd62c932123e0bb352497e345e13add25b56658d572af9109b3ddaef6ac96a675ddd758e0195448a481143161f343b741295f6ca00faa6880cc778007c8188d16ef0a57f8cf07e1ba30830785b67c81269216fef20eef9f3a2b600137db6be6577c1b01c71dfa2289ba6af1e3a85e96289b79175509e3aac85c28487615e08e627fb32c3d782b44ad9f2dd828c6adfe7898f7e3e94992e34279db471f1720f3793aa80324346c9cca32b7fa57c8170e9105e84a4d666a37dd38857e15abf180e9ce9de9884216b570e125c7ece119f15fbb3f18dd18161ecf9a3c8d1e40ae8a4d3698321d248c9376a273eeb245cd9a598aa511cd84c419b8c81c96d1ee06a72e5cdb07bb290e116df8e53fbfd4459c99dbec6073c266483c0027d9784d5f33efca01ef1ab928643c934d1f0e1883c6ddd76477e7ad6258c9fc427ce7c5769abe6eb9cec061a585cdb51748e6c3414d678bc1b699c0adbc3a23f9d0b84ba105a2feacbf0c4825d767ee981b531e096c6861515421ac38989f83e397decdcb96ec04376d7abcbf9d9686e86651aa626d0517a788f51aa1d9570fdc26e95cd7ca8ea65f765883ca7a21844a66dfa5f35ca0864c63cc166be3c8ce41cbc3349b8bc74433586b6ff2d5c1a3aaf9a0b7ba994036013da3baf460bc1b17545b3a18df5e3d957cc5d5e1613c18f7117e6919e5548c89502f85b42c4cb65907404032142fb13aad1c9d5f352a12a4d7363d57fa1ded32c6fcaf096d2776bb14b2274ec0429620aa99a5dcfca51ae2abb2709f2d6ac28b1c50cd1e465c25b5485932fbf9cb542994f5e04e7c95a7a8ba2aff4f7e85a169ae49ce53611fb1baeade1e9b5e13942ee2da8a7be2e0d2073fb1e318c6cb19578221abd92f9b358d8eb7f9c47f4a4fca417d85f4ed19b3c5458b22851cc04b70e76d2525406a1e16f02e7a37794c1f7fa0480d0c6c19da0751dd65de0e6ca5a54175382304a5919582324b8c4ac8bb980381b648f5ae23b0257411cac427305b88524f1abb31f9fc111f81361d0903524ea5deffa20fe9e3301b0928817856117eb658c933eb175006289f5c931ffc9fbd948c228e6ef4b0b0df675ec32a17fb780376d53c6dbf80ba8327ce41b8bbd6cb1903547a4e5d3ea7f5dc289e8b81af0db2afb4ac86e197f0ec510aec53f2f4a840ed6094f8c004779e26dd45747075f729c9fa0744a23e7aa831a66ddb50a914d747dfb16a04e16acf13ab3529fff4a2b540c2b7f308ab7f8d0126f880ccf8623b4a1005c2d8548ba74bb09256aec7b1eedfeebed96c20bd0b01bd437b7a0a414912aae2f57166fdc36fb79f051dc61960f5c9368003bacfad7e6b810d0954a189ab1f8ae33dace8a04bb7f4bc2a1fb9bfca4ee87981bb9ef34fa8b6d85eadd64511eca1422a604dcb71ee4b34a08c576957a856a1dc10dc9cf2c3b737c7cc6a0280d2fac8357e3fbc1bec0d195c605bc3f07feb4ca0c073f56ae316175d7056d8065ca6e008a921723dc11e77c9e97a861d74109555a199d20ebb86cc10fe74e3a410f0b57df31659f6365f68dd43142e0519ad4b41d754c7c03b0d06af1d929488ff2419e98974b7f03bb45b0e2795b3d0a4f7282519a3921de3fdcb5aaa8e48923d77c2d5b46df01c2e81cb1be9593f49906c2b8820adcea3358bf67043bd923d5c745672165bbc4a7032e4d528540f9c83caa4a06c451c6ecddb232400a093ece8aa1897436ca2b645369a549b865d62daaab070cc64e264caf234766b8d3fa4a7689c4ec746b1785c78f249361b0b6a5246cf591a9ec7f2fb3a5aa450d45465b3b230b93dee327b01305cdd1941a22585788c5dc7a08b4866b4b8a15fe2121cf62e1f0cd63485b03f1a5662e5d295e2c18e90dc29c8b2b84aca11ca189f4985bf840a8895bc930a9023dced9fb4cdace80c0815842bb5b689465c088ad7a040837891fc02a6cc16835524f22", [[], []]}, 0x1220) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000240)) read$rfkill(r1, &(0x7f00000001c0), 0x8) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r4, r3) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, 0x4000, 0x1}) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000240)) read$rfkill(r1, &(0x7f00000001c0), 0x8) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r4, r3) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, 0x4000, 0x1}) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) [ 366.215871] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=944 sclass=netlink_xfrm_socket pig=14325 comm=syz-executor.0 20:22:05 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 366.398140] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=944 sclass=netlink_xfrm_socket pig=14325 comm=syz-executor.0 20:22:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r4, r3) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000380)={0x9, 0x7, 0x9, 0xf3f2}) set_robust_list(&(0x7f0000001700)={&(0x7f0000001640), 0x8001, &(0x7f00000016c0)={&(0x7f0000001680)}}, 0x18) bind$inet(r2, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000780)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779a05c5c5a09000000ecf323c935ba26eab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc082b7bcdec844f667da0860700000000000000000000000000000000ebc53db0f533e8d15d34bf", 0x82, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f00000002c0), &(0x7f0000000300)=0x4) accept4$inet6(r1, 0x0, &(0x7f0000000280), 0x1000) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@multicast1, 0xfffc, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) write$binfmt_aout(r5, &(0x7f0000000400)={{0x10b, 0xe0, 0x80, 0x3b0, 0x28a, 0x1, 0x23c, 0x7}, "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", [[], []]}, 0x1220) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000240)) read$rfkill(r1, &(0x7f00000001c0), 0x8) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, 0x4000, 0x1}) 20:22:05 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r4, r3) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000380)={0x9, 0x7, 0x9, 0xf3f2}) set_robust_list(&(0x7f0000001700)={&(0x7f0000001640), 0x8001, &(0x7f00000016c0)={&(0x7f0000001680)}}, 0x18) bind$inet(r2, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000780)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779a05c5c5a09000000ecf323c935ba26eab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc082b7bcdec844f667da0860700000000000000000000000000000000ebc53db0f533e8d15d34bf", 0x82, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f00000002c0), &(0x7f0000000300)=0x4) accept4$inet6(r1, 0x0, &(0x7f0000000280), 0x1000) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@multicast1, 0xfffc, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) write$binfmt_aout(r5, &(0x7f0000000400)={{0x10b, 0xe0, 0x80, 0x3b0, 0x28a, 0x1, 0x23c, 0x7}, "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", [[], []]}, 0x1220) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:05 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e23}}, 0x3, 0x2}, 0x90) mknod(&(0x7f0000000180)='./file0\x00', 0x8, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) ioctl$RTC_UIE_OFF(r2, 0x7004) r4 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="3cc253b746f4cfb28d8e5ddc42fb"], 0xfe4e) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r5, &(0x7f0000000080)={0x9}, 0xfffffff4) splice(r4, 0x0, r5, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x200200) open(0x0, 0x0, 0x0) 20:22:05 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="f54d8f570292507cf082b71df41249f91febaf5ddc90781d0477f119a635242283df8f01e294fb77ab5a616786c08073d226"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r4, r3) ioctl$SIOCRSGCAUSE(r3, 0x89e0, &(0x7f0000000000)) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:22:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000240)) read$rfkill(r1, &(0x7f00000001c0), 0x8) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) 20:22:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 367.042457] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=944 sclass=netlink_xfrm_socket pig=14379 comm=syz-executor.0 [ 367.061550] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=944 sclass=netlink_xfrm_socket pig=14387 comm=syz-executor.2 20:22:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000240)) read$rfkill(r1, &(0x7f00000001c0), 0x8) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x405) [ 367.147395] audit: type=1804 audit(1569702125.835:116): pid=14394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir047733419/syzkaller.E6cL2l/150/file0" dev="sda1" ino=16897 res=1 20:22:05 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000240)) read$rfkill(r1, &(0x7f00000001c0), 0x8) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) 20:22:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 367.298949] audit: type=1804 audit(1569702125.945:117): pid=14401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir047733419/syzkaller.E6cL2l/150/file0" dev="sda1" ino=16897 res=1 20:22:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000240)) read$rfkill(r1, &(0x7f00000001c0), 0x8) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) 20:22:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 367.707951] audit: type=1804 audit(1569702126.395:118): pid=14394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir047733419/syzkaller.E6cL2l/150/file0" dev="sda1" ino=16897 res=1 [ 367.741922] audit: type=1804 audit(1569702126.395:119): pid=14401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir047733419/syzkaller.E6cL2l/150/file0" dev="sda1" ino=16897 res=1 20:22:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000240)) read$rfkill(r1, &(0x7f00000001c0), 0x8) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) 20:22:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000240)) read$rfkill(r1, &(0x7f00000001c0), 0x8) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) 20:22:06 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='f'], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:22:06 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000300)) open(0x0, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r4, r3) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r5}}, 0x18) 20:22:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}], 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000240)) read$rfkill(r1, &(0x7f00000001c0), 0x8) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000240)) read$rfkill(r1, &(0x7f00000001c0), 0x8) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) 20:22:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}], 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}], 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000240)) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {0x0}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000240)) read$rfkill(r1, &(0x7f00000001c0), 0x8) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) 20:22:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {0x0}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000240)) read$rfkill(r1, &(0x7f00000001c0), 0x8) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x405) 20:22:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000240)) read$rfkill(r1, &(0x7f00000001c0), 0x8) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) 20:22:08 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r2], 0x17) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000080)={0x14}, 0xfffffff4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) splice(r5, 0x0, r4, 0x0, 0x5, 0xa1fdbc5f164c0a4d) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:22:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {0x0}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000240)) read$rfkill(r1, &(0x7f00000001c0), 0x8) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) 20:22:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000240)) read$rfkill(r1, &(0x7f00000001c0), 0x8) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) 20:22:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000240)) read$rfkill(r1, &(0x7f00000001c0), 0x8) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) 20:22:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000240)) read$rfkill(r1, &(0x7f00000001c0), 0x8) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:08 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x8, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='system.sockprotoname\x00', &(0x7f0000000300)=""/215, 0xd7) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:22:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000240)) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:08 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xfe4e) stat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x1, &(0x7f00000003c0)=[r2]) stat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x1, &(0x7f00000003c0)=[r3]) open(&(0x7f00000005c0)='./bus\x00', 0x84000, 0x2) stat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x1, &(0x7f00000003c0)=[r4]) stat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x1, &(0x7f00000003c0)=[r5]) getgroups(0x8, &(0x7f00000003c0)=[r2, 0xee00, 0xee00, r3, 0x0, r4, r5, 0xee01]) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./bus\x00', 0x7, 0x2, &(0x7f0000000140)=[{&(0x7f0000000280)="961552cc1daaea7904551e2b5cfc9d492ffc399506ff498f7de6a6eab25941655a9af2e55fd4f1a52aff492e76648fc5ea980a11408652ff455be8a9c4fbb41bef8a06d6b4368af8a21ef53e270dbbef69fbf373534ba9c2a87bb329d3d3c5d266618f537148174c66c491694d67eb0d78b0327bb8c5d726f7aeecece97f963c829b7e4049b2e9e480b19a9a047f", 0x8e, 0x4}, {&(0x7f0000000340)="a3bce16a775fc70c8641582c1214e63485b12d5321c271d9b7c422a2ce92b5549cd23a35d8c2b2f10d010f76b907c6206b88d6f0f5f7f5f5ac0b4b5b75c72e71ae5b549c23c6d769a695a77a142094", 0x4f}], 0x200021, &(0x7f0000000540)={[{@nodots='nodots'}, {@dots='dots'}, {@dots='dots'}, {@nodots='nodots'}, {@fat=@gid={'gid', 0x3d, r6}}, {@fat=@check_strict='check=strict'}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'userGPLem1selinux'}}, {@dont_hash='dont_hash'}]}) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r7, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r7, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:22:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000240)) read$rfkill(r1, &(0x7f00000001c0), 0x8) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:08 executing program 4: writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:08 executing program 4: writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) [ 370.229665] sg_write: 43 callbacks suppressed [ 370.229690] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 370.229690] program syz-executor.0 not setting count and/or reply_len properly 20:22:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be", 0x16}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 370.275549] audit: type=1800 audit(1569702128.965:120): pid=14551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bus" dev="sda1" ino=17217 res=0 [ 370.280960] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 370.280960] program syz-executor.2 not setting count and/or reply_len properly 20:22:09 executing program 4: writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be", 0x16}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 370.419057] audit: type=1804 audit(1569702129.065:121): pid=14561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir047733419/syzkaller.E6cL2l/152/bus" dev="sda1" ino=17217 res=1 20:22:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:09 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) [ 370.572931] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 370.572931] program syz-executor.0 not setting count and/or reply_len properly [ 371.020217] audit: type=1804 audit(1569702129.705:122): pid=14561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir047733419/syzkaller.E6cL2l/152/bus" dev="sda1" ino=17217 res=1 20:22:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000240)) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be", 0x16}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:09 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:09 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/validatetrans\x00', 0x1, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000140)=0x3) open(0x0, 0x0, 0x0) 20:22:10 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) [ 371.303047] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 371.303047] program syz-executor.0 not setting count and/or reply_len properly 20:22:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd806306", 0x21}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 371.389634] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 371.389634] program syz-executor.2 not setting count and/or reply_len properly 20:22:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd806306", 0x21}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) [ 371.581734] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 371.581734] program syz-executor.0 not setting count and/or reply_len properly 20:22:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd806306", 0x21}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 371.724242] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 371.724242] program syz-executor.2 not setting count and/or reply_len properly 20:22:10 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) [ 371.884311] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 371.884311] program syz-executor.0 not setting count and/or reply_len properly 20:22:10 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x40) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000040)) r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x101800) r4 = socket$inet6_udp(0xa, 0x2, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) dup3(r3, r4, 0xc0000) 20:22:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a7", 0x26}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:10 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:10 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r5 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) r6 = semget$private(0x0, 0x2, 0x0) semop(r6, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000340)={0x8000000, 0x0, 0x28}) semtimedop(r6, &(0x7f0000000200)=[{0x0, 0xffff}, {0x1}], 0x2, 0x0) ioctl$IMSETDEVNAME(r4, 0x80184947, &(0x7f0000000140)={0x0, 'syz0\x00'}) semop(r6, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) semctl$IPC_RMID(r6, 0x0, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r8 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r8, r7) setsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000300)=@int=0xd4, 0x4) dup2(r5, r4) write$P9_RREADLINK(r4, &(0x7f0000000000)={0xe, 0x17, 0x1, {0x5, './bus'}}, 0xe) r9 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x101080, 0x0) getsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f00000000c0), 0x10) 20:22:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:10 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a7", 0x26}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 372.107565] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 372.107565] program syz-executor.2 not setting count and/or reply_len properly 20:22:10 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:10 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a7", 0x26}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, 0x0, 0x0) [ 372.593396] audit: type=1804 audit(1569702131.285:123): pid=14681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir047733419/syzkaller.E6cL2l/154/bus" dev="sda1" ino=17041 res=1 20:22:11 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="56d7a29529fc002f4b95e0500867b6d6cf55c4e79b5852b5cfaa7f167fa24f99a42e8315488bfef67c6fc7432a32584a12f70e2156592ad757c044a559115bdbef0b4b5012ad8b8cdb414fa7fcfb5ac0fcd36a42dbc3dd4c6abffc887da807ffb3e855a0942c714a23002d1460890d2f0e2c95ef7ffb1eb500b06cf1a07d213a068636eeb2ac1cf802e4af893b190d6d70664a78bbf2c3f5647899fe251f97612bbe20ddafd75a2604cf69be84037d1c1474e6dfc14e37cc74208e34aeff03000000000000"], 0xfe4e) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000040)={0x1d, 0x2c, 0xe, 0x18, 0xa, 0xffffb8a4, 0x2, 0x85}) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x4) write$P9_RATTACH(r4, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r4, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:22:11 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, 0x0, 0x0) 20:22:11 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:11 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) [ 372.621915] audit: type=1804 audit(1569702131.305:124): pid=14679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir047733419/syzkaller.E6cL2l/154/bus" dev="sda1" ino=17041 res=1 [ 372.679301] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 372.679301] program syz-executor.2 not setting count and/or reply_len properly 20:22:12 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r1, r0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000300)=""/225) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r3 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r4, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r3, 0x0, r4, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:22:12 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r1, r0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), 0x4) mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x0, 0x10000) ioctl$VIDIOC_S_PRIORITY(r3, 0x40045644, 0x3) r4 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r5, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r4, 0x0, r5, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={&(0x7f0000000040)='./file0\x00', r2}, 0x10) open(0x0, 0x0, 0x0) 20:22:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a", 0x29}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, 0x0, 0x0) 20:22:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:12 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a", 0x29}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}], 0x1) 20:22:12 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000), 0x0) 20:22:12 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:12 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) execve(&(0x7f0000000040)='./bus/file0\x00', &(0x7f0000000340)=[&(0x7f00000000c0)='trustedsystem^{system\\security+nnodev\xe1}\x00', &(0x7f0000000140)='em1-nodev\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='\xb2}#\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='!\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='&\x00', &(0x7f0000000440)='mime_typevmnet1{\x00', &(0x7f0000000480)='-^posix_acl_access:]&\x00', &(0x7f00000004c0)='.\x00', &(0x7f0000000500)='\x00']) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r2], 0x12) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r3, 0x0, 0xffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) signalfd(r4, &(0x7f0000000580)={0x40}, 0x8) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:22:12 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000780)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779a05c5c5a09000000ecf323c935ba26eab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc082b7bcdec844f667da0860700000000000000000000000000000000ebc53db0f533e8d15d34bf", 0x82, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x561e7f580fd2034c, &(0x7f0000000000)=""/23, &(0x7f0000000040)=0x17) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) splice(r3, 0x0, r2, 0x0, 0x81, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000380)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x5f62322de72c2df0, 0x6, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) open(0x0, 0x0, 0x0) 20:22:12 executing program 2: writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a", 0x29}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000), 0x0) 20:22:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000), 0x0) 20:22:13 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27", 0x2a}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:13 executing program 2: writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:13 executing program 2: writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:13 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x15caa628458af666) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:22:13 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = gettid() tkill(r1, 0x14) ptrace$peek(0x1, r1, &(0x7f0000000000)) r2 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) getsockname(r0, &(0x7f0000000300)=@nl, &(0x7f0000000140)=0x80) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r2, 0x0, r3, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:22:13 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27", 0x2a}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{0x0}], 0x1) 20:22:13 executing program 0: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:13 executing program 2: r0 = syz_open_dev$sg(0x0, 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:13 executing program 0: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:13 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000140)='./bus\x00', 0x4000, 0x98) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0xca) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r4, &(0x7f0000000080)={0xd01bd373a09f81c7, 0x69, 0xfffd, {0xe0}}, 0x14) splice(r1, 0x0, r4, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffffffff}}, 0x80000001, 0x0, 0x1, 0x9, 0x2}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0x6, 0x1, 0x9}, 0x10) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r7 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r7, r6) setsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, &(0x7f0000000240)=0x7, 0x2) 20:22:13 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27", 0x2a}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{0x0}], 0x1) 20:22:13 executing program 0: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:13 executing program 2: r0 = syz_open_dev$sg(0x0, 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:13 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 375.323143] sg_write: 1 callbacks suppressed [ 375.323170] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 375.323170] program syz-executor.3 not setting count and/or reply_len properly [ 375.356044] audit: type=1800 audit(1569702134.045:125): pid=14815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=17615 res=0 [ 375.385733] audit: type=1804 audit(1569702134.055:126): pid=14815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir891012259/syzkaller.MYfibd/270/bus" dev="sda1" ino=17615 res=1 [ 375.413085] audit: type=1804 audit(1569702134.055:127): pid=14815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir891012259/syzkaller.MYfibd/270/bus" dev="sda1" ino=17615 res=1 20:22:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{0x0}], 0x1) 20:22:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, 0x0, 0x0) 20:22:17 executing program 2: r0 = syz_open_dev$sg(0x0, 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:17 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) sendmmsg$sock(r3, &(0x7f0000002a40)=[{{&(0x7f0000000000)=@caif=@dbg={0x25, 0xff, 0x4}, 0x80, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000003f40)="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", 0x163}], 0x2, &(0x7f00000003c0)=[@txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xfffffffe}}, @timestamping={{0x14, 0x1, 0x25, 0x7ff}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x81}}], 0x90}}, {{&(0x7f0000000480)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x62, 0x1, 0x3}}, 0x80, &(0x7f0000002940)=[{&(0x7f0000000500)="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", 0xff}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000140)="2733d36f2f0e4e", 0x7}, {&(0x7f0000001600)="507c7e6dbb4a203794e50a793d50137f426cf1c5cbbca6f275b9a9351660e8cdf8a096b7c5294d67430c285d0c0703621e1f21836983ce505b413a77a7ebb492b215b053d14eb696485da1e1a3b952b6831da6e776ae7692df6524bf9bdbdfaa599951162aae9942635ce3ad832bc5ec9dc2be52096725d7773eb2f7d7d6d72d422adeb271395252764a1bfd5904077835e1ae9f5e798c050c", 0x99}, {&(0x7f00000016c0)="c357c80069b0085b222a2be1756c792a89497e57647646ab8639aedadd349410fe7d2f432cf9184c087e17b179a5c7b867bf3bd0420dbe306be243f17e86b268f1b8941230c97cf0cbe5f10a852f0d63f01ee6ba786c093db5a1f3682faf9dcd4ceafe1a1a60a4cbc911bb6a163a7cc41ff0d7338ac763b9c4698d449c52acd47128def73b4508c6c0c7788be74d2e5c5ab7367939bf3b8d9fe66c5779e0a49b36ea25aaf672e72e2f5e98dcc571cec5de7ea040d5883a0d18c9c47862825255af71287c17acfe07c4b4a6", 0xcb}, {&(0x7f0000000280)="021f84bb91256bbb", 0x8}, {&(0x7f00000017c0)="95350c0fa669897a148936db5d3263197b10dce9d1817fc53e9146664c8b383b25aa46cec0e7d9b1a3881821339fd351d2aca50ea43a440a171d4fba9a046dce33e0203d2b16ddf7cba4a61638d0b4bccc248695679181f74b80c63b8d96016fba2b93", 0x63}, {&(0x7f0000001840)="bfb6979b7d716037368bc154c2fed31d230396780fcc4b28a930b3beb4ccd23243ee1f0c5fac30a8ba7161c1098249a9a8705ca4ec30b29e8b287ca120ceaa1c72711ac5e425cfbb834822d18d73ecf1b1e6596f8e3ff0449ccea92c3c74dfb2991fe56d74cdd77f607bb3ecceef8e431f0a282b92cea3b1b13657926c4cf47f1c370b18f1bd53f5f6583900595e6dfc90a6c3f06ae90971ca", 0x99}, {&(0x7f0000001900)}, {&(0x7f0000001940)="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", 0x1000}], 0xa, &(0x7f0000000300)=[@mark={{0x14, 0x1, 0x24, 0x6}}], 0x18}}], 0x2, 0x2c0400c7) syz_mount_image$xfs(&(0x7f0000002ac0)='xfs\x00', &(0x7f0000002b00)='./file0\x00', 0x3, 0x5, &(0x7f0000003e40)=[{&(0x7f0000002b40)="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", 0x1000, 0x3ff}, {&(0x7f0000003b40)="addc2257a9db8e37caec673f874081001476f7e6e0a57b3751a405b4bb9afeb28f40d4456df90c482ca9a984186277dc837102996b47a2f7bca8fcbc5e1e34c852fbdcd1", 0x44, 0x1}, {&(0x7f0000003bc0)="62ccd813ad840755c226779a609a5207c30850cb9bfbd317c026bb741f929c38a3697e5cbc01a4a72939aa1491acb6267e7bf84463a9a6b80bd0920ee4337e4ea89510761449064d68aec4b4a42befe03655be74ead1f60b5c1e96eb4e9ebabb5f8dfd3d4fb7a14dd0ff934fd8bb59383cc8940f792f46206dbad6301f8b89c00dc74eb33a32fc0e6f26224aa6ca21dadbc1274dc73a7c41e01a36d3b5ed212888170aa213fd1c88b7b4f240edfa0ff5f0e495893405279f801b68f333526dba9dd0d225756867282e38ab1df6bd282c2f927b34488ee9863c7aeeaaa26b6fce315d5898edf3067e1bfad805cf794fa155f1ef19a37170", 0xf7, 0x5}, {&(0x7f0000003cc0)="3a71b69e0ad937f9aa3dff7aa70c229c67d3a3c73ab187e946662ce525da57f6ffe3448698ce09dd5ef6c10332381e540327e7ac4e0217236b8e07ade74ed99963f6beb0fd49683897", 0x49, 0x7ff}, {&(0x7f0000003d40)="66b62ba26f2203cb87463af1b44b1cb179e89c459134651bf1acfce1acc6c6792b05c3c3f227250bb10be289651fa551e1ba77548fa59b561a796e9bff0dbd5d9cb4c591b3ebc0e26cead9c9e3cb856f4ed077ef49d4d63c18eb2df44aaf5d214f3ef594d328d7b3ab4e4a05bafa5fb1f6989604958925242bfb34caf06efd4ddb2ad94bc8c27fb5948a9fad78e14f4b999cb9ffc09ca594956f948173bee2b2f687261a2401536c2fdd870adef6cfe07c3f681321611a040c611816d71f171c45fb4ce6fb8fa386cb364593746123a755a4dcb1a86dcaece26436c9e00cb199e2f716d9a34f4b5703092fdbe2", 0xed, 0x1}], 0x30, &(0x7f0000003ec0)=ANY=[@ANYBLOB='bsdg\n:ups,uqnoenforce,noattr2,gqnoenforce,subj_role=wlan0md5sum\x00,\x00']) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000001900)=0x1, 0x4) syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000380)='./bus\x00', 0x8, 0x2, &(0x7f0000002a00)=[{&(0x7f00000040c0)="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", 0x1000, 0xb7c9}, {&(0x7f00000050c0)="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", 0x1000, 0xf2ec}], 0x2, 0x0) 20:22:17 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) close(r1) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r4, r3) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000000)={0xc7, 0x4}) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r6 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r6, r5) ioctl$sock_bt_cmtp_CMTPCONNDEL(r6, 0x400443c9, &(0x7f0000000040)={{0x2, 0x7, 0x7, 0x4, 0xac, 0x8d}, 0xab}) open(0x0, 0x0, 0x0) 20:22:17 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1) 20:22:17 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) [ 378.386738] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 378.386738] program syz-executor.3 not setting count and/or reply_len properly 20:22:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, 0x0, 0x0) 20:22:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1) 20:22:17 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, 0x0, 0x0) 20:22:17 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1) [ 378.610763] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop1. 20:22:17 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) [ 378.703810] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 378.703810] program syz-executor.3 not setting count and/or reply_len properly 20:22:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c2277", 0x1a}], 0x1) 20:22:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}], 0x1) 20:22:17 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:17 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:17 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) open(0x0, 0x0, 0x0) 20:22:17 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) open$dir(&(0x7f0000000380)='./file0\x00', 0x208502, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000780)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779a05c5c5a09000000ecf323c935ba26eab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc082b7bcdec844f667da0860700000000000000000000000000000000ebc53db0f533e8d15d34bf", 0x82, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="071f25ad", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x20) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r2, 0x200}, &(0x7f0000000280)=0x8) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r3 = open(&(0x7f0000000000)='./bus\x00', 0x106202, 0x0) write$P9_RATTACH(r3, &(0x7f0000000080)={0x14}, 0xfffffff4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r6, &(0x7f0000000780)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779a05c5c5a09000000ecf323c935ba26eab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc082b7bcdec844f667da0860700000000000000000000000000000000ebc53db0f533e8d15d34bf", 0x82, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) recvmmsg(r6, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000003c0)={0x1, 0x800, 0x8f4, 0x1f}, 0x8) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0xfffd, 0x0, 0xa}, {0x0, 0x0, 0x4}}}, 0xb8}}, 0x0) splice(r0, 0x0, r5, 0x0, 0x10000000000400, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:22:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c2277", 0x1a}], 0x1) 20:22:17 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000), 0x0) 20:22:17 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c2277", 0x1a}], 0x1) 20:22:17 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000), 0x0) 20:22:17 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000), 0x0) 20:22:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 379.573721] audit: type=1800 audit(1569702138.265:128): pid=14932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=17614 res=0 20:22:18 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x100, 0xc0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r4, r3) write$P9_RATTACH(r4, &(0x7f0000000140)={0x21171e290f863e61, 0x69, 0x0, {0x8}}, 0xfffffffffffffddf) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) accept(r5, &(0x7f0000000300)=@hci, &(0x7f0000000080)=0x80) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000000)=0x80000000, &(0x7f0000000040)=0x4) open(0x0, 0x0, 0x0) 20:22:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb", 0x27}], 0x1) 20:22:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, 0x0, 0x0) 20:22:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{0x0}], 0x1) 20:22:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:18 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xffffffe9) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:22:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb", 0x27}], 0x1) 20:22:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{0x0}], 0x1) 20:22:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, 0x0, 0x0) 20:22:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, 0x0, 0x0) 20:22:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{0x0}], 0x1) 20:22:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c2277", 0x1a}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb", 0x27}], 0x1) 20:22:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}], 0x1) 20:22:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1) 20:22:18 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000200000000fb12050100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x10000, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r4, r3) write$cgroup_subtree(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x3) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r5, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r5, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = gettid() tkill(r7, 0x14) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000300)=r7) [ 380.081585] netlink: 18 bytes leftover after parsing attributes in process `syz-executor.5'. 20:22:18 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000040)=0xfffffffffffffffd, 0x8) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r2 = open$dir(&(0x7f0000000240)='./file0\x00', 0x309240, 0x1) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB=';'], 0xfe4e) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r2, 0x0, r3, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:22:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c2277", 0x1a}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2a", 0x2e}], 0x1) 20:22:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000), 0x0) 20:22:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1) 20:22:19 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c2277", 0x1a}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1) 20:22:19 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2a", 0x2e}], 0x1) 20:22:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000), 0x0) 20:22:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c2277", 0x1a}], 0x1) 20:22:19 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2a", 0x2e}], 0x1) 20:22:21 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) ioctl$void(0xffffffffffffffff, 0x5451) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) fstat(r0, &(0x7f0000000000)) 20:22:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb", 0x27}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000), 0x0) 20:22:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c", 0x31}], 0x1) 20:22:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c2277", 0x1a}], 0x1) 20:22:21 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="10"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x40000, 0x0) 20:22:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb", 0x27}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{0x0}], 0x1) 20:22:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c", 0x31}], 0x1) 20:22:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c2277", 0x1a}], 0x1) 20:22:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb", 0x27}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{0x0}], 0x1) 20:22:22 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) mq_open(&(0x7f0000000000)='keyringvmnet1cgroupGPLmd5sum\x00', 0x80, 0x20, &(0x7f0000000040)={0x3ff, 0x7, 0x1, 0x8, 0x100, 0x0, 0x7056, 0xfffffffffffffffd}) r0 = open(&(0x7f00000008c0)='./file0\x00', 0x103202, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="d9"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x410007, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0xa000) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000900)={r3, 0x0, 0x200, 0x9, 0x8000}) rename(&(0x7f0000000140)='./bus\x00', &(0x7f0000000280)='./bus\x00') open(0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)="59b3fa2054d8c3005a22094e600c6fc6ecb27f16dd962e4717f228fde8ad781eb174a7dca83368dfff5f6054b258d3500f4bedea797e27347ac3fc9e75d1e10c57407fc2c2", 0x45}, {&(0x7f0000000380)="c0373bb319c3e62557c4dbb51be7362041bb1ce3d4564ebbbb465a11c7d85e67b663e4904c8524c0b7c562457175b50e2e4fd91056532a171d7eb0e56fcca5754effe71b0a606f087d4babad7df13653e6a3713494ba45ac12f87a745c60a20f51ad178003927f7269621da38423bd9923622e75a8584b40e870a2b2d6de549154a5dfaa06a239ad72231bf71a0f9939678e1892e82871ff632457d34bfc5352ebceba9f91c0d5948aab408f8c8351734b8e30b1427a630e3b18ec61d01a0fbb5f0f04a177", 0xc5}, {&(0x7f0000000480)="c98205dc258f0d946d9404e859cbc8b2e8ccdbf8d81e8bd24239656a621f4fc8d47affa69b29e55869df9f3c247be4e3b0e9b79ca340c122300aad47b50a221c8ceb896a620b6212cced0ff6f2e84fecfb2f970b5ad3", 0x56}, {&(0x7f0000000500)="2183bbcaae5c4ed134a61140faca230526d06fe7eec077bbcbdf32671f348d85e24f", 0x22}, {&(0x7f0000000540)="af2b31ad3f420455bf8c2f92f02f6a6ff60bcef2bd19311142fbdc711273fededa6fea71f9bc6a4b830175b4a7e595be0c95725051cbb055f1db8935eb5291532c3d8f27ce0ad01c35af43a3f849b4b68b80297d7fc622ecc442747318d1480bf6c483958d53d79d8e180e34dc5a2630b3ef279ab33c170c94c33d868e72accb8e34d0bb6f03abde06b89b564b1c17b06a0fa34a4a13ad1269da34a6ff7cc1", 0x9f}], 0x5, &(0x7f0000000980)=ANY=[]}}], 0x1, 0x0) 20:22:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb", 0x27}], 0x1) 20:22:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2a", 0x2e}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c", 0x31}], 0x1) 20:22:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{0x0}], 0x1) 20:22:22 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYRESOCT, @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESDEC=r2, @ANYPTR, @ANYRESHEX=0x0, @ANYRES16, @ANYRES16=r0, @ANYPTR, @ANYRESHEX=r1, @ANYRESOCT, @ANYRESHEX=0x0], @ANYRESOCT=r3], @ANYRES64=r4, @ANYRES32=0x0, @ANYRESDEC, @ANYRESDEC=r0, @ANYRESOCT=r5, @ANYRES64=0x0, @ANYRES32=r6, @ANYRES32=r7], 0x63) r8 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r8, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r8, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:22:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b4", 0x33}], 0x1) 20:22:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1) 20:22:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2a", 0x2e}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb", 0x27}], 0x1) 20:22:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b4", 0x33}], 0x1) 20:22:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2a", 0x2e}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:23 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="61e0a7ac0d5790a9803d59385bfc"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:22:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1) 20:22:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b4", 0x33}], 0x1) 20:22:23 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb", 0x27}], 0x1) 20:22:23 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c", 0x31}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:23 executing program 1: mknod(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000140)={0x14, 0x69, 0x0, {0xd7, 0x1, 0x40}}, 0xfffffffffffffeab) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', &(0x7f0000000300)=""/4096, 0x1000) 20:22:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1) 20:22:23 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c", 0x31}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:23 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2a", 0x2e}], 0x1) [ 384.495356] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 384.495356] program syz-executor.4 not setting count and/or reply_len properly 20:22:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c2277", 0x1a}], 0x1) 20:22:23 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2a", 0x2e}], 0x1) 20:22:23 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:22:23 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c", 0x31}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c2277", 0x1a}], 0x1) 20:22:23 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2a", 0x2e}], 0x1) 20:22:23 executing program 1: mknod(&(0x7f0000000000)='./bus\x00', 0x880, 0x20005) mknod(&(0x7f0000000180)='./file0\x00', 0x10, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) setxattr(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)=@random={'btrfs.', '*eth0\x00'}, &(0x7f0000000140)='{selinuxwlan1\x00', 0xe, 0x3) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) r3 = semget$private(0x0, 0x2, 0x0) semop(r3, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semtimedop(r3, &(0x7f0000000200)=[{0x0, 0xffff}, {0x1}], 0x2, 0x0) semop(r3, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) semctl$GETNCNT(r3, 0x6, 0xe, &(0x7f0000000300)=""/106) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 384.906187] audit: type=1804 audit(1569702143.595:129): pid=15151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir891012259/syzkaller.MYfibd/278/file0" dev="sda1" ino=17681 res=1 [ 384.944737] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; 20:22:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c2277", 0x1a}], 0x1) [ 384.944737] program syz-executor.4 not setting count and/or reply_len properly 20:22:23 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c", 0x31}], 0x1) 20:22:23 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b4", 0x33}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:23 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b4", 0x33}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:23 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c", 0x31}], 0x1) 20:22:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb", 0x27}], 0x1) [ 385.125180] audit: type=1804 audit(1569702143.815:130): pid=15158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir891012259/syzkaller.MYfibd/278/file0" dev="sda1" ino=17681 res=1 [ 385.400868] audit: type=1804 audit(1569702144.095:131): pid=15151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir891012259/syzkaller.MYfibd/278/file0" dev="sda1" ino=17681 res=1 20:22:24 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="032b554f"], 0xfe4e) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffff4) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f0000000300)=0xc) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x6f70dc6f, 0x0, &(0x7f0000000140), 0x120000, &(0x7f0000000340)={[{@nodatasum='nodatasum'}], [{@appraise_type='appraise_type=imasig'}, {@fowner_lt={'fowner<', r2}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@euid_gt={'euid>', r4}}]}) open(0x0, 0x0, 0x0) 20:22:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c", 0x31}], 0x1) 20:22:24 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b4", 0x33}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb", 0x27}], 0x1) 20:22:24 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./bus\x00', 0x8001420, 0x3) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 385.450240] audit: type=1804 audit(1569702144.095:132): pid=15158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir891012259/syzkaller.MYfibd/278/file0" dev="sda1" ino=17681 res=1 20:22:24 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, 0x0, 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b4", 0x33}], 0x1) 20:22:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb", 0x27}], 0x1) [ 385.565556] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 385.565556] program syz-executor.4 not setting count and/or reply_len properly [ 385.634439] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 385.634439] program syz-executor.3 not setting count and/or reply_len properly 20:22:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b4", 0x33}], 0x1) 20:22:24 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, 0x0, 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2a", 0x2e}], 0x1) [ 385.844330] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 385.844330] program syz-executor.3 not setting count and/or reply_len properly 20:22:24 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="fbbb35b53c368ea41d2d7122c8a143e20dcc2153789f71d6f4fb5e96cef268a36c854e92ed8a76ea2486a32688d0647d996405d2f92296d16798a739e971b392102628e94afa5180f66337a068fabceba26ab3c6261e8dec64db49a53575848cb8ba99142de605ec4c27b6a5859159fc9c64874e5b8fc24d6bc5cf04ea8f02aff1ed98d7fed04cbf4a9c4d435e1055115aadbc468eed0000022b91d1091da54e0eb5bfd7e2ce3ef2bae0bc424bfce5a7f7a647abd90619fd60ad2fc97411a4d30964392432"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:22:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c", 0x31}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b4", 0x33}], 0x1) 20:22:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2a", 0x2e}], 0x1) 20:22:24 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, 0x0, 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:24 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file1\x00', 0xc0802, 0x20) 20:22:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2a", 0x2e}], 0x1) 20:22:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) [ 386.238707] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 386.238707] program syz-executor.3 not setting count and/or reply_len properly 20:22:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c", 0x31}], 0x1) [ 386.354824] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 386.354824] program syz-executor.0 not setting count and/or reply_len properly [ 386.398524] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 386.398524] program syz-executor.4 not setting count and/or reply_len properly 20:22:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) [ 386.551173] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 386.551173] program syz-executor.3 not setting count and/or reply_len properly [ 386.649191] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 386.649191] program syz-executor.0 not setting count and/or reply_len properly [ 386.692701] audit: type=1804 audit(1569702145.385:133): pid=15267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir891012259/syzkaller.MYfibd/280/file0" dev="sda1" ino=17694 res=1 [ 386.919004] audit: type=1804 audit(1569702145.605:134): pid=15270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir891012259/syzkaller.MYfibd/280/file0" dev="sda1" ino=17694 res=1 20:22:26 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="fb9074bd9d5f26db31a4565ddd13211d6e44381164005acb71fd226cb0b765ba03f318a82a9f486d6717"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:22:26 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="fbff1ec9dbf347d52f5113b784eed5fef332ac0750343a99f238ef8d65a8b60d587371840b193453a82b"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r4, r3) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="dafa", @ANYRES32=0x0], &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000000)={r6, 0xfff}, &(0x7f0000000040)=0x8) 20:22:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c", 0x31}], 0x1) 20:22:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:26 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c", 0x31}], 0x1) 20:22:26 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:26 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="595151515e12fdfbcd426479444d20b81b4ecaa1817cb0472f7f00000000000000b50e0ba500000000633b2cd3dc19a10cdca8fa708f7a27b73665af5e54a6b18acd8ff1ed379086694c52a259ec31f70645bb6322d13b3b668ccbc9ec66cb4068f4a02c6fc93e66a2591dfb86729b827db3a6a557da3dd13bce98936a780c95a5c8ca1f793c84a0d1f48dad84e8b09c7ae0774e5cf35e50a51b079b5b3282ae9150f67c08e21c5ab4b4c14925cbecddd2beef687862a16b637479a22ef1a7de9252b8851d7482089449211ffbedcd77fa2af6b22be53be908579542bda469eb08b954a8d3b857377f8d5109ebdf3a12bb1a83e3e7e2184bf5fdd14c397c21188d25f8372c2e1e0f30c65cbe4a5c84cf1ab395977c1e000000000000000000"], 0xfe4e) stat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x1, &(0x7f00000003c0)=[r2]) stat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x1, &(0x7f00000003c0)=[r3]) open(&(0x7f00000005c0)='./bus\x00', 0x84000, 0x2) stat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x1, &(0x7f00000003c0)=[r4]) stat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x1, &(0x7f00000003c0)=[r5]) getgroups(0x8, &(0x7f00000003c0)=[r2, 0xee00, 0xee00, r3, 0x0, r4, r5, 0xee01]) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./bus\x00', 0x7, 0x2, &(0x7f0000000140)=[{&(0x7f0000000280)="961552cc1daaea7904551e2b5cfc9d492ffc399506ff498f7de6a6eab25941655a9af2e55fd4f1a52aff492e76648fc5ea980a11408652ff455be8a9c4fbb41bef8a06d6b4368af8a21ef53e270dbbef69fbf373534ba9c2a87bb329d3d3c5d266618f537148174c66c491694d67eb0d78b0327bb8c5d726f7aeecece97f963c829b7e4049b2e9e480b19a9a047f", 0x8e, 0x4}, {&(0x7f0000000340)="a3bce16a775fc70c8641582c1214e63485b12d5321c271d9b7c422a2ce92b5549cd23a35d8c2b2f10d010f76b907c6206b88d6f0f5f7f5f5ac0b4b5b75c72e71ae5b549c23c6d769a695a77a142094", 0x4f}], 0x200021, &(0x7f0000000540)={[{@nodots='nodots'}, {@dots='dots'}, {@dots='dots'}, {@nodots='nodots'}, {@fat=@gid={'gid', 0x3d, r6}}, {@fat=@check_strict='check=strict'}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'userGPLem1selinux'}}, {@dont_hash='dont_hash'}]}) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r7, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r7, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:22:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b4", 0x33}], 0x1) 20:22:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) [ 387.858435] audit: type=1800 audit(1569702146.545:135): pid=15300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="bus" dev="sda1" ino=17668 res=0 [ 388.006683] audit: type=1804 audit(1569702146.605:136): pid=15303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir138158650/syzkaller.GLBOtf/301/bus" dev="sda1" ino=17668 res=1 20:22:26 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000000000)={0x8, 0x80000001, 0x9, 0x3, 0x5}) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:22:27 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000040)=0x8) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="64e16ebfcf2241b3eaf8fb"], 0xfe4e) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r4, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r4, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:22:27 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b4", 0x33}], 0x1) 20:22:27 executing program 4: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x6, 0x4, 0x6, 0x3, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20) 20:22:27 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x2, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x1000, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="e9ffff019a0c3c53a33dd2eab25123131757870f7c677e", @ANYRES32=0x0], &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x7f}, 0x8) r4 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) signalfd(r5, &(0x7f0000000380)={0xff}, 0x8) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="13"], 0xfe4e) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r6, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r4, 0x0, r6, 0x0, 0xffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x4, 0x63080) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:22:27 executing program 4: syz_mount_image$reiserfs(&(0x7f0000002d40)='reiserfs\x00', &(0x7f0000002fc0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f000000a300)={[{@grpjquota='grpjquota', 0x3d}]}) 20:22:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b4", 0x33}], 0x1) 20:22:27 executing program 3: r0 = gettid() ptrace$setopts(0x4206, r0, 0x9, 0x0) 20:22:27 executing program 0: write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a0025f00485bc04fef7001d020b49ffed", 0x15) recvmmsg(0xffffffffffffffff, &(0x7f0000007600)=[{{&(0x7f00000008c0)=@nl=@unspec, 0x80, &(0x7f0000000780)=[{&(0x7f0000000480)=""/132, 0x84}, {&(0x7f0000000280)=""/5, 0x5}, {&(0x7f00000002c0)=""/36, 0x24}, {&(0x7f0000000940)=""/230, 0xe6}], 0x4, &(0x7f0000000c40)=""/194, 0xc2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000800), 0x0, &(0x7f0000004680)=""/230, 0xe6}}, {{&(0x7f0000005a00)=@ethernet, 0x80, &(0x7f0000006f00)=[{0x0}, {&(0x7f0000005ac0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000006e00)=""/235, 0xeb}], 0x4}, 0x401}], 0x3, 0x40, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), 0x0) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f00000003c0)=0x6, 0x4) socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) 20:22:27 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) umount2(&(0x7f0000000200)='./file0\x00', 0xd) 20:22:27 executing program 2: move_pages(0x0, 0x2000005d, &(0x7f0000000280), &(0x7f00000002c0), 0x0, 0x0) [ 388.859035] REISERFS warning (device loop4): sh-2021 reiserfs_fill_super: can not find reiserfs on loop4 [ 388.960692] REISERFS warning (device loop4): sh-2021 reiserfs_fill_super: can not find reiserfs on loop4 20:22:28 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x1, 0x1) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:22:28 executing program 2: capset(&(0x7f0000000080), &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) dup(0xffffffffffffffff) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffe}) sched_setaffinity(0x0, 0xffffffffffffff06, &(0x7f0000000340)=0x401) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) dup(0xffffffffffffffff) 20:22:28 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x6, 0x4, 0x6, 0x3, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000100), 0x0}, 0x20) 20:22:28 executing program 4: syz_mount_image$reiserfs(&(0x7f0000002d40)='reiserfs\x00', &(0x7f0000002fc0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f000000a300)={[{@grpjquota='grpjquota', 0x3d}]}) 20:22:28 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'syz_tun\x00', {0x2, 0x0, @multicast1}}) listen(r0, 0x5eb857) connect(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140), 0x4) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a35000/0x400000)=nil, 0x400000, 0x1000006, 0x2013, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xbf8887258bb4bf73}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xa0, 0x0, 0x100, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffd}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7ff}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x81}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7b}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x947a}]}, 0xa0}, 0x1, 0x0, 0x0, 0x340000c1}, 0x8008) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x40001d0, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, 0xffffffffffffffff, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000001c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b"], 0x14}}, 0x0) recvmmsg(r3, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) [ 389.386626] REISERFS warning (device loop4): sh-2021 reiserfs_fill_super: can not find reiserfs on loop4 [ 389.461724] audit: type=1400 audit(1569702148.145:137): avc: denied { name_bind } for pid=15391 comm="syz-executor.3" src=20003 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 20:22:28 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000300)={[{0x3, 0xff, 0xce, 0x3, 0x7, 0x8, 0x9, 0x20, 0xad, 0xf4, 0x80, 0x0, 0x8}, {0xb5, 0x1, 0x40, 0x1, 0xff, 0x7f, 0x40, 0x1f, 0x1, 0xb7, 0x3f, 0xd4, 0x20}, {0x5, 0x0, 0x4, 0x5, 0x1, 0x80, 0xc0, 0x81, 0x9a, 0xa2, 0x3, 0x1, 0x7}], 0x9}) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./bus\x00', 0x6, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:22:28 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x6, 0x4, 0x6, 0x3, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$MAP_UPDATE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000100), 0x0}, 0x20) 20:22:28 executing program 0: write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a0025f00485bc04fef7001d020b49ffed", 0x15) recvmmsg(0xffffffffffffffff, &(0x7f0000007600)=[{{&(0x7f00000008c0)=@nl=@unspec, 0x80, &(0x7f0000000780)=[{&(0x7f0000000480)=""/132, 0x84}, {&(0x7f0000000280)=""/5, 0x5}, {&(0x7f00000002c0)=""/36, 0x24}, {&(0x7f0000000940)=""/230, 0xe6}], 0x4, &(0x7f0000000c40)=""/194, 0xc2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000800), 0x0, &(0x7f0000004680)=""/230, 0xe6}}, {{&(0x7f0000005a00)=@ethernet, 0x80, &(0x7f0000006f00)=[{0x0}, {&(0x7f0000005ac0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000006e00)=""/235, 0xeb}], 0x4}, 0x401}], 0x3, 0x40, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), 0x0) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f00000003c0)=0x6, 0x4) socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) 20:22:28 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x2f}}, &(0x7f0000003ff6)='OPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 389.681647] audit: type=1400 audit(1569702148.185:138): avc: denied { node_bind } for pid=15391 comm="syz-executor.3" src=20003 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 20:22:28 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) 20:22:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 389.826437] device team0 entered promiscuous mode [ 389.843808] device team_slave_0 entered promiscuous mode [ 389.865608] device team_slave_1 entered promiscuous mode 20:22:28 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) openat$tun(0xffffffffffffff9c, 0x0, 0x200000000100017e, 0x0) 20:22:28 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x1100, 0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000300)="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") open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:22:28 executing program 2: ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) 20:22:28 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000002580)=ANY=[@ANYPTR64, @ANYBLOB="eb5105b5f796d20eaed7ac8e8a8e2795a044e668c4d894dae0f37c2a5875aa81e588e4fe5433ac4f2de995508ed26ed0d17023b21d55ad1a0ed3ab500b810cf69c57a6379d38fb2015d0a659905b2132a22204253405", @ANYRESOCT, @ANYRES32, @ANYPTR64], 0x81) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) 20:22:28 executing program 4: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x6, 0x4, 0x6, 0x3, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000080)={r0, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) 20:22:28 executing program 3: getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f00000009c0)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x40001d0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg(r3, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 20:22:29 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c010000", @ANYRES16=r3, @ANYBLOB="00042dbd7000fcdbdf25020000004000050008000100657468003400020008000200ff7f0000080002000000000008000200d40000000800010007000000080002000700000008000100080000001400070008000200ff7f000008000100050000003800060008000100000400000400020004000200080001007f000000080001000100ffff04000200080001000100010008000100000000009c0004001c00070008000300ff0100000800040001800000080001000c0000000c00010073797a3100000000340007000800040006000000080004000600000008000400080000000800040006000000080004000400000008000300ffffffff3c0007000800030005000000080002001400000008000200a2000000080003000600000008000200b5145ae5080003000008000008000400fbe90000bf0c2fe5e6efc335"], 0x13c}, 0x1, 0x0, 0x0, 0x4080}, 0x90040) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x4e23, @multicast1}, {0x306, @dev={[], 0x27}}, 0x4, {0x2, 0x4e20, @empty}, 'veth0_to_hsr\x00'}) setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='trusted.overlay.upper\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="00fb81000694168d67654ab6aa39f0d4a2c1dfbf35da063252c575164c974df1dc953114613a376ebb8124eb7c8a714e24eb30c70373c8ae0cbadcc40ff3067ed406487476113f164f193d9a9bffc10478f2a387ef623415694d982827053da098150f3bad0e908c7f13c700ae412d4bfd666b6cdd13b0874f676307fa4fbce7a6"], 0x81, 0x0) 20:22:29 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x43, 0x0, 0x0) 20:22:29 executing program 2: 20:22:29 executing program 0: write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a0025f00485bc04fef7001d020b49ffed", 0x15) recvmmsg(0xffffffffffffffff, &(0x7f0000007600)=[{{&(0x7f00000008c0)=@nl=@unspec, 0x80, &(0x7f0000000780)=[{&(0x7f0000000480)=""/132, 0x84}, {&(0x7f0000000280)=""/5, 0x5}, {&(0x7f00000002c0)=""/36, 0x24}, {&(0x7f0000000940)=""/230, 0xe6}], 0x4, &(0x7f0000000c40)=""/194, 0xc2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000800), 0x0, &(0x7f0000004680)=""/230, 0xe6}}, {{&(0x7f0000005a00)=@ethernet, 0x80, &(0x7f0000006f00)=[{0x0}, {&(0x7f0000005ac0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000006e00)=""/235, 0xeb}], 0x4}, 0x401}], 0x3, 0x40, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), 0x0) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f00000003c0)=0x6, 0x4) socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) 20:22:29 executing program 2: 20:22:29 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xe, 0x0, &(0x7f0000000180)="c45c57ce395de5b2810f7d637a22", 0x0, 0x59}, 0x28) 20:22:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) 20:22:29 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0740c9a62cb554e1acf675fb351742b0994e49c9196191fec641aba62d87ce99c6063b9b5fe0f54616a3dd7dd46c45e9b23a5a6988aab40520855d573732b32927aee79e4c06f1d8f44964994d7b10fb8da1d99bb38937c8168d870920d9fd37a246608e73ec4abf8b1ecbf0c68ac1055b1399143cb24b743e0cfff2bcfe97578458c636c6fd75245e1db2ec2c6c78a4782db34edd60937de6d7e77bf0f0c3b9ed9badc20d752f10ae25af2d6e531b38f0f6807294aef0266686"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:22:29 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_SECUREBITS(0x1c, 0x0) 20:22:29 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000200)={0x3, 0x0, 'client0\x00', 0x0, "d1a4306727b13911", "9e3110063771d117f19553470154197bb2f7dacca3d2a4a7d13739018ea4ce21", 0x101}) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:22:29 executing program 3: 20:22:29 executing program 3: 20:22:30 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x374ef58445eb482e, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:22:30 executing program 4: 20:22:30 executing program 3: 20:22:30 executing program 0: 20:22:30 executing program 4: 20:22:30 executing program 3: 20:22:30 executing program 0: 20:22:30 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000040)='.\x00', 0x30042, 0x8) open(0x0, 0x0, 0x0) 20:22:30 executing program 0: 20:22:30 executing program 2: 20:22:30 executing program 3: 20:22:30 executing program 4: 20:22:31 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) 20:22:31 executing program 0: 20:22:31 executing program 3: 20:22:31 executing program 4: 20:22:31 executing program 2: 20:22:31 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8169c9e219b2ab22eeaa64cd65b236fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:22:31 executing program 3: 20:22:31 executing program 4: 20:22:31 executing program 2: 20:22:31 executing program 0: 20:22:31 executing program 4: 20:22:31 executing program 0: 20:22:31 executing program 3: 20:22:31 executing program 2: 20:22:31 executing program 4: 20:22:31 executing program 0: 20:22:31 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[], 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:22:31 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0xa0f, r3) splice(r1, 0x0, r4, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:22:31 executing program 4: 20:22:31 executing program 2: 20:22:31 executing program 3: 20:22:31 executing program 0: 20:22:31 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) poll(&(0x7f00000006c0)=[{r0, 0x2014}], 0x1, 0x0) socket$unix(0x1, 0x0, 0x0) 20:22:31 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x7, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000180)="11dca50d5e0bcfe47bf070") sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 20:22:31 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000002580)=ANY=[@ANYPTR64, @ANYBLOB="eb5105b5f796d20eaed7ac8e8a8e2795a044e668c4d894dae0f37c2a5875aa81e588e4fe5433ac4f2de995508ed26ed0d17023b21d55ad1a0ed3ab500b810cf69c57a6379d38fb2015d0a659905b2132a2220425340577", @ANYRES16, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYPTR64, @ANYBLOB="ca7b56ef501943e65fe9beb8a39488d296212b275ff578cfbac02caf4da0fdcf01759b0bfe99111db3439588f6fa1538fb432fb3b95a5e7ff266dff85f5c8c7759398085295743139905e70ef6a8693d94e0768743bf5d8931420d9b2c83b063fd094cf379c84997"], 0xf0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) 20:22:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1001000008912, &(0x7f0000000300)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x24, 0x0, &(0x7f00000000c0)) 20:22:31 executing program 3: 20:22:32 executing program 4: 20:22:32 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x2000, 0x8) 20:22:32 executing program 0: r0 = socket$packet(0x11, 0x600000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'lo\x00\x00\x00\x00\x02\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @broadcast}, 0x10) r2 = socket$packet(0x11, 0x600000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'lo\x00\x00\x00\x00\x02\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x3, 0x6, @broadcast}, 0x10) 20:22:32 executing program 2: openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0xc0003, 0x0) 20:22:32 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe(0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000140)) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 20:22:32 executing program 4: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) mknod(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) 20:22:32 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x200000, 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r2], 0x14) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r3, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)='\x00', 0xffffffff, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000300)="42c8973f3e81f64075d35d85823000080960b4abaca57a5e69833794c628b85d61d6c9719b353ce8dfd5d21ddef4b6a035da6e86715ff58f2279073a378656d19c4890797b81abae666334b4b4857e862078cfc11eee881b09b8fd925c27ba6423e1e1b9ce6655cbd0350bf5fef96abb9725279840e1cab87e72f269c6227136180effd83a7066018eadddc28006a35de19704642e065747d1299b1d6e834b90855672e6ddb90da9d03d6511122b825473323a8a93abe8b4b64684f7cec6b1249b774a0e82808e620cc68f42ddf18dbed29de8818b9a82e3249051ff1c5313e2e719adda4ce8fcc92bfd811cdee75e24641e9915a8a5eb", 0xf7, 0x2}, {&(0x7f0000000400)="c23f26a83bd200fdc803d8980de3aa7b777109649f7d29fe6b8119087a7e1082fe83b63df2edd83b9c450a54064dd90abc5ff1e456e4859cb93f38c44e0a53666873ba6158a8667dd9833e007d22a5741a515d313a8050907e92eb5cc128c533a192b70e31f1d374f978bd0f10a289bc6888a508d9bb5a5d5c0db8bfe5", 0x7d, 0x6}], 0x820, &(0x7f0000000140)='\x00') ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f00000002c0)={0x91a9, 0x7fff, 0x0, 0x7, 0x101}) [ 394.007802] device lo entered promiscuous mode 20:22:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1001000008912, &(0x7f0000000300)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x16, 0x0, &(0x7f00000000c0)) 20:22:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000006100), 0x400000000000653, 0x0, 0x0) [ 394.077595] protocol 88fb is buggy, dev hsr_slave_0 [ 394.083748] protocol 88fb is buggy, dev hsr_slave_1 [ 394.094202] device lo left promiscuous mode [ 394.154265] overlayfs: filesystem on './file0' not supported as upperdir [ 394.180402] device lo entered promiscuous mode 20:22:32 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000a80)="ad56b6cc0400fb8b65d8b4ac2ca35c6e", 0x10) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 20:22:32 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe(0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000140)) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 20:22:32 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x100000001, 0x0) ioctl$VIDIOC_OVERLAY(r0, 0xc0285628, &(0x7f0000000080)) [ 394.200827] device lo left promiscuous mode [ 394.206357] device lo entered promiscuous mode [ 394.227746] device lo left promiscuous mode 20:22:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = socket$kcm(0x29, 0x5, 0x0) getpgrp(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8913, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 20:22:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1001000008912, &(0x7f0000000300)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x7b, &(0x7f0000000080), &(0x7f00000000c0)=0xff39) 20:22:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1001000008912, &(0x7f0000000300)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x7b, 0x0, &(0x7f00000000c0)) 20:22:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1001000008912, &(0x7f0000000300)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xff39) 20:22:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1001000008912, &(0x7f0000000300)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080), &(0x7f00000000c0)=0xff39) 20:22:33 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x2) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:22:33 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000300)={0x9, 0x0, [{0x80000019, 0x3c10, 0x0, 0x7, 0x1ff, 0x9, 0x101}, {0x80000001, 0xf460, 0x0, 0x0, 0x10001, 0x0, 0x1000}, {0x40000001, 0x9, 0x0, 0x10000, 0x6, 0x5, 0x80000000}, {0xc0000001, 0x5, 0x2, 0x40, 0x5, 0x1, 0xa0da}, {0xe, 0xd26c, 0x0, 0x200, 0x80, 0x2, 0x401}, {0x1, 0x0, 0x2, 0x200, 0xb9ba, 0x20, 0xff}, {0x4, 0x2, 0x2, 0x3, 0x6, 0xfffffffc, 0xffffffc0}, {0x2, 0x81, 0x1, 0x3, 0x60, 0x6, 0x9}, {0x80000019, 0x1, 0x2, 0x1ff, 0x2, 0xfff, 0xe8c7}]}) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r5 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r5, r4) ioctl$IOC_PR_RESERVE(r4, 0x401070c9, &(0x7f0000000000)={0x8, 0x4, 0x1}) 20:22:33 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x7, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000180)="11dca50d5e0bcfe47bf070") sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 20:22:33 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xff0e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x1000) connect$inet6(r2, &(0x7f0000000140), 0x1c) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 20:22:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1001000008912, &(0x7f0000000300)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0xff39) 20:22:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1001000008912, &(0x7f0000000300)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0xff39) 20:22:33 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) 20:22:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1001000008912, &(0x7f0000000300)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x66, 0x0, &(0x7f00000000c0)) 20:22:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1001000008912, &(0x7f0000000300)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x1e, 0x0, &(0x7f00000000c0)) 20:22:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1001000008912, &(0x7f0000000300)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x66, &(0x7f0000000080), &(0x7f00000000c0)=0xff39) 20:22:33 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) bind$unix(r1, 0x0, 0x0) 20:22:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8948, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 20:22:34 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000)) 20:22:34 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:22:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1001000008912, &(0x7f0000000300)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x72, 0x0, &(0x7f00000000c0)) 20:22:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1001000008912, &(0x7f0000000300)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x18, &(0x7f0000000080), &(0x7f00000000c0)=0xff39) 20:22:34 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) write(r1, &(0x7f0000000340), 0x41395527) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 20:22:34 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0xff39) 20:22:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1001000008912, &(0x7f0000000300)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x24, &(0x7f0000000080), &(0x7f00000000c0)=0xff39) 20:22:34 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000140)) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 20:22:34 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x400, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f0000000300)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r5 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r5, r4) write$P9_RATTACH(r5, &(0x7f0000000000)={0xffffffffffffffd0, 0x69, 0x1, {0x0, 0xffffffff, 0x6}}, 0xa5) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:22:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x3e, 0x0) write$nbd(r2, &(0x7f00000000c0)={0x6000000, 0x0, 0x0, 0x0, 0x0, "a3ef41749fa527ab78fc60f180bd82099cbab35a2fdbede5fbb11bedfb1f8cd557b0bdfcd7f42f5b0ffb83a83e65611b8e66182eff039800ccce5b3c9e6dd2af872a1cb21492f8816f1aa5319e87f29738ad944b2034440a"}, 0x68) 20:22:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1001000008912, &(0x7f0000000300)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x15, 0x0, &(0x7f00000000c0)) [ 395.853140] dlm: Unknown command passed to DLM device : 0 [ 395.853140] [ 395.897363] dlm: Unknown command passed to DLM device : 0 [ 395.897363] 20:22:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1001000008912, &(0x7f0000000300)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x72, &(0x7f0000000080), &(0x7f00000000c0)=0xff39) 20:22:34 executing program 2: setreuid(0x0, 0xee00) r0 = geteuid() setreuid(0x0, 0x0) mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000440)="11dca5055e0bcfe47bf070") setxattr$security_capability(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f0000000040)=@v3, 0x18, 0x0) setreuid(r0, 0x0) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) [ 395.986922] overlayfs: filesystem on './file0' not supported as upperdir [ 396.084204] warning: `./bus' has both setuid-root and effective capabilities. Therefore not raising all capabilities. 20:22:35 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x7, 0x88) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x4) open(0x0, 0x0, 0x0) 20:22:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8924, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 20:22:35 executing program 0: syz_read_part_table(0x0, 0x2, &(0x7f00000016c0)=[{0x0, 0x0, 0x80000001}, {&(0x7f0000001a40)="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", 0x1c2, 0x5}]) 20:22:35 executing program 4: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r3, 0x0, 0x0) io_cancel(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 20:22:35 executing program 2: mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = inotify_init() r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x81000100) 20:22:35 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000780)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779a05c5c5a09000000ecf323c935ba26eab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc082b7bcdec844f667da0860700000000000000000000000000000000ebc53db0f533e8d15d34bf", 0x82, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000440)={0x0}, &(0x7f00000006c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000700)={r3, @in6={{0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, [], 0x20}, 0x9}}, 0xe93, 0x1, 0x3f, 0x8}, 0x98) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0)={0x7, 0x312}, 0xc) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="fbfbb41bc7660906f2dd056f0bb2bf46ceaf5d65e36c136476bdba640fd6792b3aa8282293cff5bcc572c82404b6c2ed000000005261f06707bd50fbea9eaa841fd8b741345d8ea370304063966dfe0b7348dc5be2cc6b9ac05acf23762e2d7cf05befd0708fed880389d53fbe54542c4dbeeaca1037ab3f67178e9815e8c117ecd688a102edc3c9dc1b7a0c2ce25f5364be9c4da35ead79a70fd0d5"], 0xfe4e) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r4, &(0x7f0000000080)={0x14}, 0xfffffff4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./bus\x00', 0x0, 0x2076c4fcfb547346}, 0x10) splice(r1, 0x0, r4, 0x0, 0xffffffff, 0x0) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600)='/dev/video1\x00', 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000e5ec5adcfa0e615d8b6954000000000000000001e000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) ioctl$VT_RELDISP(r0, 0x5605) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000140)="7afecf234513b2badcf7f51ae7d542f7830c226e", 0x14}, {&(0x7f0000000300)="0ce4ab09e903583649960cddd9aef742b6e6de7be84342174671965b2af5b178d6fe2c2f8df4be82a86a3dea7c259e7b7b80251bfd9ad90f9f3ccb124d30172e1941cd491802025f3c4cf07f450a7daf2982ad4f955d105e53aa3302b19ec3d5a9f427a22cbd1d2cf693d5bdb7e771d0f84aff716657aa", 0x77}, {&(0x7f0000000440)}, {&(0x7f0000000480)="e42987e6b0bf3e0bd605c1efa487b79b4d6a8bb42a02da7f5a196fd158a6515d84b53b6c64f1400937c68b6eb85d651f147f5cd371f0b7618f8a1424e0c60d585da5e9f101119e9b7bc32b40681d5c736ff6809d97", 0x55}, {&(0x7f0000000500)="dce063c9a84e6bb215e15ce01f0e6579816a70be50b31330935cf32831abee725ba2b454da38c72db8f47d3934e2fb8e39095e0ab7cc4ec68cd2c817364a77284b3b5254626fea66a0584023e0714520fdd8d62d9895bb3cb75f45d828c91335e1e1cf228366f106438ba882323875c3", 0x70}], 0x5, &(0x7f0000000640)=[@rights={{0x28, 0x1, 0x1, [r5, r6, r7, r8, r9, r10]}}], 0x28, 0x4000842}], 0x1, 0x20024020) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:22:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 20:22:35 executing program 3: r0 = msgget(0x0, 0x1) msgctl$IPC_RMID(r0, 0x0) 20:22:35 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000300)={0x6, 0x118, 0xfa00, {{0x3f, 0x200, "702ff0e4e5a20688ba033a82c287ea7f3c0110cd5bfbe1a903bf6150483068e3d4ee5592aa8ca781c507240aee83fe7813d8a62bca71b398174a12807b1b1788db6dfd77335b2af3f4bfa82e00859563e3170388dd65174c20e2a20d0e68b6f817c8566348bc68bb963326d981eca6b472604b73278d82d659359062ca0d7841817b722bcff733b70b6de0f544854ffcdd40c84705da1a136d02c5823bfbbd7692e674978336e8c8d07ebe3e4a2d464928e28a02da4cda8f8c05dcb93ed5b5c6fa062822a27fc8ad27d65704aceb4cd5f0df1b45e8d2edbba73a15c272d47103547ad0d7c48eef158a1d1dbec9215c593522b0ac575a68c5bd6153baad8df216", 0x81, 0x4, 0xfd, 0xfc, 0x70, 0x1, 0x4, 0x1}, r3}}, 0x120) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:22:35 executing program 3: semop(0x0, &(0x7f0000000000)=[{0x0, 0xffffffffffffb6d0}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0, 0x0]) 20:22:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 20:22:35 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x3e, 0x0) write$nbd(r0, &(0x7f00000000c0)={0x6000000, 0x0, 0x0, 0x0, 0x1, "a3ef41749fa527ab78fc60f180bd82099cbab35a2fdbede5fbb11bedfb1f8cd557b0bdfcd7f42f5b0ffb83a83e65611b8e66182eff039800ccce5b3c9e6dd2af872a1cb21492f8816f1aa5319e87f29738ad944b2034440a"}, 0x68) 20:22:35 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_getoverrun(0x0) 20:22:35 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) wait4(0x0, 0x0, 0x0, 0x0) [ 396.966824] dlm: no locking on control device 20:22:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6991fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f691", 0x52}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:22:35 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6991fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333", 0x54}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 20:22:35 executing program 0: r0 = socket(0x22, 0x2, 0x4) getsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) 20:22:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6991fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571fe0000000000", 0x5d}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:22:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0072646d6120b3850a18de22c01d2ac4768b0e5418546b"], 0x14002c) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000180)={0x0, 0xffff, 0x1, 0x0, 0x1, [{}]}) 20:22:36 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r2, r1) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000000)={0x10000, 0x8, "426f13a2de0827fe451a2aa94b9e69c977c54fa8e8c4c10e8c93d757a3dc09a3", 0x7fffffff, 0xd8e, 0x1, 0x3, 0x191}) r3 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x29) write$P9_RATTACH(r4, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r3, 0x0, r4, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:22:36 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r4, r3) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {0x0, 0xe}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r15, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r15, {0x0, 0xe}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100400}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x1ac, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0xf8, 0x2, [{0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0xfffffffffffffe44, 0x4, 0x1000}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_pcerss\x0e\xff\xff\xff\x7f\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r10}}, {0x8}}}]}}, {{0x8}, {0x90, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3ebf}}, {0x8, 0x6, r15}}}]}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x0) splice(r1, 0x0, r14, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:22:36 executing program 0: msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/149) 20:22:36 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="b70200000000009cbfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000000000006a0a80fe000000008500000053000000b70000000000000095000000000000004e6201363034fdb11716a08af339d1a1ee35fe2a3a255c33282044b324953c0a9fa9a84452569957c1002ed7d4d8e17f791f4798c8eb484de03352c69b3edff5be27765ba5f8f2879021c2ea53ea79acd7fb38fdf79f2be9087b7c4ae7dd5e4dee8851d40c617b58c8108ddf12dddd4bfc6a4dd35383561cbe0458f1f5b6beba510b4229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a912f01a201e694e3806e8c8fe8b8091627fcb311a55a9875c606bda873a4bca7f6cde352655635a650a5a7ad0a7b1d7d10e14b1e2375f6f55b52028d758d2f7085054567383f309336c34c06e751f94655df5e7c10b609acbe29dc3e031d116483efc20a8a74c01fd7edac55c37c6315005cf47f48ada3a6087af06d14a0763b43b7b71dd9e489900019c5ffbd57de9e149900274d19ac263ab6811c5856b54a7a1db331a641e77e817ab7bc09d87d8c2bd858830057ea46c6fa6bcafcb5b689b994ac44fdefcfe2c216aeb1572c7d01f88456c718ec4542d5e5d3daecacadb33d087bd07152a4ac356d44a86fcda11459cd5707f895a9598e0434df80faa83e1121b184f9c7e3b6853ad2671a27cff78e766edaee3eb89d138ceeff21e72213dcce4194ffe2ea1a687390549e5dc82783f3f17115821b5d997e7d2b33ece8d1e900000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xe, 0x0, &(0x7f0000000180)="c45c57ce395de5b2810f7d637a22", 0x0, 0xd0}, 0x28) 20:22:36 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0xfeffffff00000000, 0xe, 0x0, &(0x7f0000000040)="01b3e39938cb9ed247641da05eee5468", 0x0, 0xf000}, 0x28) [ 397.685322] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15913 comm=syz-executor.1 [ 397.717933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15913 comm=syz-executor.1 [ 397.749981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15913 comm=syz-executor.1 [ 397.799337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15913 comm=syz-executor.1 20:22:36 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/.\az0\x8c', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000640), 0x12) [ 397.846445] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15913 comm=syz-executor.1 [ 397.863596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15913 comm=syz-executor.1 [ 397.894910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15913 comm=syz-executor.1 [ 397.938927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15913 comm=syz-executor.1 [ 397.966133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15913 comm=syz-executor.1 20:22:36 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) sendto(r0, &(0x7f00000002c0)="898fd85ca26ca108eed16073f93813a15cda504f44ccf25e4ce76e051a029a97ca2b5c5a9e6b1ed38c4a2284679337a33e1e90d9f027c3a1e0c21f70710ea805f5272887a3c90d234303b0732dcf5ef6698502de68d81bceed2d0824316a51c052ef748c1efb5b447c66b569c3a7ff79ce29cabb257a86771efbc5e116190544388bc417a737700a2045e4ba8d5a0ae7241a283344500978f7f2f442f4af8ee68d9c0e16d9ca6e17c89be0f43bf04908a6e9246a", 0xb4, 0x1f91a397c49234e4, &(0x7f0000000380)=@pptp={0x18, 0x2, {0x2, @rand_addr=0x2}}, 0x80) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[], 0x2e8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r5 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r5, r4) ioctl$VIDIOC_SUBDEV_S_EDID(r4, 0xc0285629, &(0x7f0000000400)={0x0, 0xffff, 0x7fff, [], &(0x7f0000000140)}) getsockopt$inet6_dccp_int(r3, 0x21, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x12002, 0x100) write$P9_RATTACH(r6, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r6, 0x0, 0xffffffff, 0x0) r7 = open(0x0, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000008", @ANYRES32=0x0], &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000040)={r9}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f0000000440)={r9, @in6={{0xa, 0x4e24, 0x7, @empty, 0x7fff}}}, 0x84) [ 398.028122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15913 comm=syz-executor.1 20:22:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') preadv(r0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) 20:22:38 executing program 4: syz_open_dev$binder(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x30c0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000000)={0x4, 0x0, 0x80000001, 0x5, 0x0, 0x80000001}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000700)={{{@in6=@dev, @in6=@loopback}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000400)="8cd9c148f3a5bfb3630bc0eff36436642a49e5e777703138c3286e67f38f60b94599365e", &(0x7f0000001340)=""/4096}, 0x20) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x4000, 0x0) 20:22:38 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/.\az0\x8c', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) capset(&(0x7f00000001c0)={0x20071026}, &(0x7f00009b3000)) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000640), 0x12) [ 400.105237] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure 20:22:39 executing program 2: syz_open_dev$binder(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x30c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000005c0)=ANY=[@ANYBLOB]) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000000)={0x4, 0x0, 0x80000001, 0x5, 0x0, 0x80000001}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000700)={{{@in6=@dev, @in6=@loopback}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000400)="8cd9c148f3a5bfb3630bc0eff36436642a49e5e777703138c3286e67f38f60b94599365e", &(0x7f0000001340)=""/4096}, 0x20) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x4000, 0x0) 20:22:39 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000540)=0x1950, 0x4) syz_mount_image$nfs(&(0x7f00000000c0)='nfs\x00', &(0x7f0000000140)='./file0\x00', 0x80, 0x8, &(0x7f0000000840)=[{&(0x7f0000000280)="c576aad4a5229061d1fb2be662b7c8fe8faf434dd97a446c066e0a42e96e5e5d06fe677b", 0x24, 0x80000001}, {&(0x7f0000000440)="5aab6d72c72a0da659a4cb182b0a179a26ae64e5bd4901a78875029db07295ff9b09d0febb35f18d33db56b1300ca6f8d3b32cb8670070aca78a44f504fdfd7d", 0x40, 0x9b24}, {&(0x7f0000000480)="c92d078e4f1ab916e3e17aeb7594eaf480ceedded8742b13d042bb99d4999795998a7bfbf1115a882e9653772bac0f0bf9060ec58c3d89bc423b8e50121fe9be8b7c9ff442b28cc3355b8c0d9c279fee6225fa98ed0e2a585ebdc2ece423be5fdb144c7d0f3d6300879060c24eb01b83abe87520b8cba33a0fa3b10a23f63ad38a1bd6c720bd761f1490f277eeaf2b2217b57580", 0x94, 0x2a}, {&(0x7f0000000580)="4d2a3c25c7eeb6a8c2146b5937fcaeb143704dff02d2757f3c9a3660744308a343213e978ed73dcfe3ea0d", 0x2b, 0xdb9}, {&(0x7f00000005c0)="b9f2b59af7e98cc7f5b134f13d7e7e10073078763906dc30a7e69aaf58c00aa7407c3d2a37041a54bc8cf8cd184b3f99faec45175c1dd2a647161f13995f0d25a8942e20dfa64879ad96acc23259b8183349abea8b75a7292f086e", 0x5b, 0x83}, {&(0x7f0000000640)="83cfeb08dc1f6d54939378ca80970c014f2776cc04269e1af290bbd15e6846234fe0e36885851b1fa4f8dfb4c430c5659e96ed3b896511bd17778ec62566e962bc6818c899ba6a1ecb1a888befcfc982c74426acdea6a0e34cc0d70212f4819452b69258520089f6ca2e968f05acfe51fc74ed00fb295fb6e17f2119cf7eec36b03373c600972f7776b8c38d1f29ff86e85c786c5693fec17ca3ef09", 0x9c, 0x8}, {&(0x7f0000000700)="27cb6e32520e5f0b781b098585bebd5f379c9bd3c4530e79aaf769e74174c9b5207e8060de1b5e2e14ea2aeb9b873d0281cf04d92cc5518462fd3b46f184cee4fcb4ee6fc3dfb18a173d42bbdc84c463917b551f22c5d00a2aad32e5b5bb8930dc1bbd3b493f22328f6dfb0bd6c83b36ec7988c6f798899776c7fd376d9adb9536271f9326aebbbdc35fae83003933c15d54fb19061425c7cd939ca4f0796fd8a8d55efea853b1010ac2167744ebebfe6b3fc4677a2ac52196507b0d523e0a7fb5fcf1c689a1d73d76f754a60d578712", 0xd0, 0x9}, {&(0x7f0000000800)="549027f3ba29aa5a32afede04c1e15bd946e97debc4f3737c4d4894f484bfb22a038add8f5a3c1f8ff2976798a", 0x2d, 0x5}], 0x8000, &(0x7f0000000900)='^(-\'$,)\x00') bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000180)="d0", 0x1, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) recvfrom$ax25(r0, &(0x7f0000000300)=""/80, 0x50, 0x20, &(0x7f00000003c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:22:39 executing program 3: syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') r1 = syz_open_procfs(0x0, &(0x7f0000865ff5)='clear_refs\x00') sendfile(r1, r0, &(0x7f0000000000)=0xf, 0xd) 20:22:39 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x2) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000340)='./bus\x00', 0x101000, 0x2) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x800, 0x980) dup2(r3, r2) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14, 0x69, 0x2, {0x64da0fe8a80f3d11, 0x4, 0x8}}, 0x14) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r6 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r6, r5) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4051000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000829bd7000fbdbdf01060000002c00020008000200000000000400040004000400040004000400040004000400080001000000000004000400"], 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x40080) r8 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r8, r4) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r4, 0x111, 0x3, 0x1, 0x4) open(0x0, 0x40000, 0x80) 20:22:39 executing program 0: mknod(&(0x7f00000005c0)='./bus\x00', 0x8, 0x0) setxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) execve(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) 20:22:39 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$P9_RCLUNK(r1, &(0x7f0000000080)={0x7}, 0x7) write$UHID_INPUT(r1, &(0x7f0000000240)={0x8, "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", 0x1000}, 0x1006) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 400.452820] Invalid argument reading file caps for ./bus [ 400.467348] Invalid argument reading file caps for ./bus 20:22:39 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r2, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r3 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) recvmmsg(r2, &(0x7f00000001c0)=[{{&(0x7f0000000040)=@nl=@unspec, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/36}, {&(0x7f0000000100)}]}}], 0x400000000000037, 0x0, 0x0) 20:22:39 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000006c0), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="43ce94e425b7d679e7663faf080200000000000008000a00", @ANYBLOB], 0x4}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r3 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="6b72646d612088c36e682704c56b1cc592f81680b9e67613cd78425fe3765acffb1f66d622a8335e5ec2f7f13195b8981a"], 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000340)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'dummy0\x00'}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x4000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000000)=0x80000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x8}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, r4, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x41, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0c63260092d541228f820ef2cccd8e83ffa67e0ef9826233f03d3d43241ccd845168a261dcbba8ae0b1a0bd8e2fa261568543ae016a05ba6495e9fd589afe86ac5"], 0x0, 0x0, &(0x7f0000000680)}) 20:22:39 executing program 3: r0 = inotify_init1(0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) 20:22:39 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r4, r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r6, 0x101, 0x0, 0x0, {{}, 0x0, 0x8001, 0x0, {0x8}}}, 0x61}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, r6, 0x100, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4101, 0x0, {0x20, 0x17, {0x7, 0x80, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}}}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x860}, 0x4000801) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r8 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r8, r7) write$UHID_CREATE2(r8, &(0x7f0000000300)={0xb, 'syz1\x00', 'syz0\x00', 'syz1\x00', 0x3e, 0x8, 0x80000001, 0x4, 0xacbd, 0x3, "6061f51907dd2750b01bce1e848a25fef6064753f824274cda024aed3541075d8f9b9795b882b0c80c0527ff8e893668f35c55c4046ffa96b467e605986d"}, 0x156) [ 400.851143] binder: 15977:15980 unknown command 2515724 [ 400.864959] binder: 15977:15980 ioctl c0306201 2000dfd0 returned -22 20:22:39 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000087000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 20:22:39 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) 20:22:40 executing program 3: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x72, 0x0, 0x0) recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/122, 0x7a}, {&(0x7f0000000340)=""/158, 0x9e}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x3}, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x72, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) [ 401.447108] binder: 15977:15985 unknown command 2515724 [ 401.484483] binder: 15977:15985 ioctl c0306201 2000dfd0 returned -22 20:22:40 executing program 4: r0 = gettid() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="f95a0f34"], 0x4}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140), 0xc}], 0x100000000000005a}}], 0x1, 0x0) clone(0x20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="7e499f5c5fd21dacb7b35ad2998aca50dedea299e5deb90bd622b9f4a177373afcbc3b5bf61816d9160365cccc061c938047d9953b277929434509c7ecfe9659f8afccc983090dfe92f8ec65fcc8e262ebca23c7e811847e2477054fc0136e136f1c21122803ab2e3a7c209f2ad15cbf989a88b6f264c970c954c01b33dd9e31ea8a7dc73435827acf47ed6c54e943473102300841ecb2e78bd261b870452493a3426094b006c2694acba7374666ae1dd0b6e1bd8307f1", @ANYBLOB="9f3388c5b87b558d8aedcbb605ebcfca9ba7e5b7f64c5649b18984549fce0580d7f51d938f9377f65353d8f1e87738c76cf8a8e40e"], 0x0, 0xec}, 0x20) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x30) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 20:22:40 executing program 2: syz_open_dev$binder(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x30c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000005c0)=ANY=[@ANYBLOB]) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000000)={0x4, 0x0, 0x80000001, 0x5, 0x0, 0x80000001}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000700)={{{@in6=@dev, @in6=@loopback}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000400)="8cd9c148f3a5bfb3630bc0eff36436642a49e5e777703138c3286e67f38f60b94599365e", &(0x7f0000001340)=""/4096}, 0x20) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x4000, 0x0) 20:22:40 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6) 20:22:40 executing program 3: r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 20:22:40 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x80) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, &(0x7f0000000300)={"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"}) open(0x0, 0x0, 0x0) 20:22:40 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = semget(0x2, 0x4, 0x2) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r2 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000000)) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r2, 0x0, r3, 0x0, 0xfffffffc, 0x0) dup3(r2, 0xffffffffffffffff, 0x887e7cba50a2e982) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:22:40 executing program 3: creat(&(0x7f00000002c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x40c00, 0x88) socket$packet(0x11, 0x3, 0x300) getsockname(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1, 0x0) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x5a) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, 0x0) r3 = memfd_create(&(0x7f0000000940)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \x05f~\xa5\x8b\xce\xb1\xd6\x97\xabN\xae\xc9\xbd\xd3g@\xe1j\x85\x9c\xd7|\xac\xb9\x92\xd2\xa3\x8b\x8dW\r\xd7@\x01fB\xba\xcd\xa8F9\x8b\xf4\xaf\xe2\xff\xae\xd1\xe6\xcf\n\xaanI\xf6r\ri\x86>\x97\xaa\xae\xf3^aD\xca\x86\x85\x80\xa8\xe2T\xb9f\xb8\xfbAm\xb6\xe0\x99~\x88\xef%\x9f\x10\xe6g\xe5\x19\x03\xc3d\xad\xdb\xa48\x9e|\xfb\xa8:{o\x03\xeaO\xdd\x87\xc3|x\xaf\xf4u0.evjg\x9d\x9dH\xef\xf4\x8d4\x83k@\x04\xf4\x83\x8b\xdd#\xb3Y\x95\x00xL\xa1.aKb)\xb5G^\xd3|\xed\xe1\x14\xc0\x1c\xb4\xdeE\xf0\xda\xc2\x14\xf5df\xd2F\x0eG\x99\xb8\xfe\xca\xc9\xf7\xee\x8c\xd5\v\xdd\xa8F\x05\xd38\xf4\xbb\xa5k(\xc3\xf8~\xa4\xe2\xf4\x10F)\xd5\x80\x9f\xfe)}\xe0\xedS&\xaa\'\xfa\x1b\x14\xbc\xf9C\x88LJ\xf0\x95p\xb4\xac\xaa\xecA\xfa\xf2\x0e\xe6\vv8\xf2\xcd\xc5\a', 0x0) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f00000002c0)) getgid() getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000001c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) pwrite64(r3, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {}, {}, {}]}) keyctl$negate(0xd, 0x0, 0x0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000280)='./file0\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) write$P9_RLERRORu(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1d0096f2503fa303ede7790074656d6367726f757000800000"], 0x19) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r4, 0x0, r6, 0x0, 0x8100000, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) accept(r1, &(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f00000003c0)=0x80) [ 402.178103] ptrace attach of "/root/syz-executor.4"[16031] was attempted by "/root/syz-executor.4"[16033] 20:22:40 executing program 4: r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0x0, 0x0, 0xfffffffffffffdcc}}], 0x400000000000490, 0x0, 0x0) [ 402.264622] kauditd_printk_skb: 2 callbacks suppressed [ 402.264632] audit: type=1804 audit(1569702160.955:141): pid=16039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir091691022/syzkaller.6CBaFA/487/bus" dev="sda1" ino=17361 res=1 20:22:41 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) [ 402.400253] protocol 88fb is buggy, dev hsr_slave_0 [ 402.410011] audit: type=1400 audit(1569702161.015:142): avc: denied { map } for pid=16037 comm="syz-executor.3" path=2F6D656D66643A2D42D54E49C56ABA707070F00884A26D202864656C6574656429 dev="tmpfs" ino=55950 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 [ 402.477661] audit: type=1804 audit(1569702161.145:143): pid=16039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir091691022/syzkaller.6CBaFA/487/bus" dev="sda1" ino=17361 res=1 20:22:41 executing program 3: creat(&(0x7f00000002c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x40c00, 0x88) socket$packet(0x11, 0x3, 0x300) getsockname(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1, 0x0) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x5a) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, 0x0) r3 = memfd_create(&(0x7f0000000940)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \x05f~\xa5\x8b\xce\xb1\xd6\x97\xabN\xae\xc9\xbd\xd3g@\xe1j\x85\x9c\xd7|\xac\xb9\x92\xd2\xa3\x8b\x8dW\r\xd7@\x01fB\xba\xcd\xa8F9\x8b\xf4\xaf\xe2\xff\xae\xd1\xe6\xcf\n\xaanI\xf6r\ri\x86>\x97\xaa\xae\xf3^aD\xca\x86\x85\x80\xa8\xe2T\xb9f\xb8\xfbAm\xb6\xe0\x99~\x88\xef%\x9f\x10\xe6g\xe5\x19\x03\xc3d\xad\xdb\xa48\x9e|\xfb\xa8:{o\x03\xeaO\xdd\x87\xc3|x\xaf\xf4u0.evjg\x9d\x9dH\xef\xf4\x8d4\x83k@\x04\xf4\x83\x8b\xdd#\xb3Y\x95\x00xL\xa1.aKb)\xb5G^\xd3|\xed\xe1\x14\xc0\x1c\xb4\xdeE\xf0\xda\xc2\x14\xf5df\xd2F\x0eG\x99\xb8\xfe\xca\xc9\xf7\xee\x8c\xd5\v\xdd\xa8F\x05\xd38\xf4\xbb\xa5k(\xc3\xf8~\xa4\xe2\xf4\x10F)\xd5\x80\x9f\xfe)}\xe0\xedS&\xaa\'\xfa\x1b\x14\xbc\xf9C\x88LJ\xf0\x95p\xb4\xac\xaa\xecA\xfa\xf2\x0e\xe6\vv8\xf2\xcd\xc5\a', 0x0) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f00000002c0)) getgid() getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000001c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) pwrite64(r3, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {}, {}, {}]}) keyctl$negate(0xd, 0x0, 0x0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000280)='./file0\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) write$P9_RLERRORu(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1d0096f2503fa303ede7790074656d6367726f757000800000"], 0x19) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r4, 0x0, r6, 0x0, 0x8100000, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) accept(r1, &(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f00000003c0)=0x80) 20:22:41 executing program 0: creat(&(0x7f00000002c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x40c00, 0x88) socket$packet(0x11, 0x3, 0x300) getsockname(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1, 0x0) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x5a) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, 0x0) r3 = memfd_create(&(0x7f0000000940)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \x05f~\xa5\x8b\xce\xb1\xd6\x97\xabN\xae\xc9\xbd\xd3g@\xe1j\x85\x9c\xd7|\xac\xb9\x92\xd2\xa3\x8b\x8dW\r\xd7@\x01fB\xba\xcd\xa8F9\x8b\xf4\xaf\xe2\xff\xae\xd1\xe6\xcf\n\xaanI\xf6r\ri\x86>\x97\xaa\xae\xf3^aD\xca\x86\x85\x80\xa8\xe2T\xb9f\xb8\xfbAm\xb6\xe0\x99~\x88\xef%\x9f\x10\xe6g\xe5\x19\x03\xc3d\xad\xdb\xa48\x9e|\xfb\xa8:{o\x03\xeaO\xdd\x87\xc3|x\xaf\xf4u0.evjg\x9d\x9dH\xef\xf4\x8d4\x83k@\x04\xf4\x83\x8b\xdd#\xb3Y\x95\x00xL\xa1.aKb)\xb5G^\xd3|\xed\xe1\x14\xc0\x1c\xb4\xdeE\xf0\xda\xc2\x14\xf5df\xd2F\x0eG\x99\xb8\xfe\xca\xc9\xf7\xee\x8c\xd5\v\xdd\xa8F\x05\xd38\xf4\xbb\xa5k(\xc3\xf8~\xa4\xe2\xf4\x10F)\xd5\x80\x9f\xfe)}\xe0\xedS&\xaa\'\xfa\x1b\x14\xbc\xf9C\x88LJ\xf0\x95p\xb4\xac\xaa\xecA\xfa\xf2\x0e\xe6\vv8\xf2\xcd\xc5\a', 0x0) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f00000002c0)) getgid() getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000001c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) pwrite64(r3, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {}, {}, {}]}) keyctl$negate(0xd, 0x0, 0x0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000280)='./file0\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) write$P9_RLERRORu(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1d0096f2503fa303ede7790074656d6367726f757000800000"], 0x19) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r4, 0x0, r6, 0x0, 0x8100000, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) accept(r1, &(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f00000003c0)=0x80) [ 402.648238] audit: type=1804 audit(1569702161.335:144): pid=16058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="bus" dev="sda1" ino=17233 res=1 20:22:41 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) [ 402.710162] protocol 88fb is buggy, dev hsr_slave_0 [ 402.716085] protocol 88fb is buggy, dev hsr_slave_1 20:22:41 executing program 3: creat(&(0x7f00000002c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x40c00, 0x88) socket$packet(0x11, 0x3, 0x300) getsockname(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1, 0x0) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x5a) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, 0x0) r3 = memfd_create(&(0x7f0000000940)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \x05f~\xa5\x8b\xce\xb1\xd6\x97\xabN\xae\xc9\xbd\xd3g@\xe1j\x85\x9c\xd7|\xac\xb9\x92\xd2\xa3\x8b\x8dW\r\xd7@\x01fB\xba\xcd\xa8F9\x8b\xf4\xaf\xe2\xff\xae\xd1\xe6\xcf\n\xaanI\xf6r\ri\x86>\x97\xaa\xae\xf3^aD\xca\x86\x85\x80\xa8\xe2T\xb9f\xb8\xfbAm\xb6\xe0\x99~\x88\xef%\x9f\x10\xe6g\xe5\x19\x03\xc3d\xad\xdb\xa48\x9e|\xfb\xa8:{o\x03\xeaO\xdd\x87\xc3|x\xaf\xf4u0.evjg\x9d\x9dH\xef\xf4\x8d4\x83k@\x04\xf4\x83\x8b\xdd#\xb3Y\x95\x00xL\xa1.aKb)\xb5G^\xd3|\xed\xe1\x14\xc0\x1c\xb4\xdeE\xf0\xda\xc2\x14\xf5df\xd2F\x0eG\x99\xb8\xfe\xca\xc9\xf7\xee\x8c\xd5\v\xdd\xa8F\x05\xd38\xf4\xbb\xa5k(\xc3\xf8~\xa4\xe2\xf4\x10F)\xd5\x80\x9f\xfe)}\xe0\xedS&\xaa\'\xfa\x1b\x14\xbc\xf9C\x88LJ\xf0\x95p\xb4\xac\xaa\xecA\xfa\xf2\x0e\xe6\vv8\xf2\xcd\xc5\a', 0x0) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f00000002c0)) getgid() getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000001c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) pwrite64(r3, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {}, {}, {}]}) keyctl$negate(0xd, 0x0, 0x0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000280)='./file0\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) write$P9_RLERRORu(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1d0096f2503fa303ede7790074656d6367726f757000800000"], 0x19) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r4, 0x0, r6, 0x0, 0x8100000, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) accept(r1, &(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f00000003c0)=0x80) [ 402.779805] audit: type=1804 audit(1569702161.465:145): pid=16061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir143447433/syzkaller.9QB5oj/469/bus" dev="sda1" ino=17553 res=1 [ 402.859659] audit: type=1804 audit(1569702161.545:146): pid=16064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="bus" dev="sda1" ino=17233 res=1 20:22:41 executing program 2: syz_open_dev$binder(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x30c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000005c0)=ANY=[@ANYBLOB]) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000000)={0x4, 0x0, 0x80000001, 0x5, 0x0, 0x80000001}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000700)={{{@in6=@dev, @in6=@loopback}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000400)="8cd9c148f3a5bfb3630bc0eff36436642a49e5e777703138c3286e67f38f60b94599365e", &(0x7f0000001340)=""/4096}, 0x20) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x4000, 0x0) 20:22:41 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="bf"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x1800003e, 0xce, 0x15}) 20:22:41 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000006c0), 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="43ce94e425b7d679e7663faf080200000000000008000a00", @ANYRES32=0x6, @ANYBLOB="1800120008000100767469000c0002000800"], 0x5}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r4 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="6b72646d612088c36e682704c56b1cc592f81680b9e67613cd78425fe3765acffb1f66d622a8335e5ec2f7"], 0x2b) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000000340)=0xe8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'dummy0\x00', r5}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x4000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, &(0x7f0000000000)=0x80000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x8}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, r6, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0c63260092d541228f820ef2cccd8e83ffa67e0ef9826233f03d3d43241ccd845168a261dcbba8ae0b1a0bd8e2fa261568543ae016a05ba6495e9fd589afe86ac5047d6dc566addc6b05fdb1674ff4cb14a369ce7792bd5713621261"], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) 20:22:41 executing program 3: creat(&(0x7f00000002c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x40c00, 0x88) socket$packet(0x11, 0x3, 0x300) getsockname(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1, 0x0) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x5a) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, 0x0) r3 = memfd_create(&(0x7f0000000940)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \x05f~\xa5\x8b\xce\xb1\xd6\x97\xabN\xae\xc9\xbd\xd3g@\xe1j\x85\x9c\xd7|\xac\xb9\x92\xd2\xa3\x8b\x8dW\r\xd7@\x01fB\xba\xcd\xa8F9\x8b\xf4\xaf\xe2\xff\xae\xd1\xe6\xcf\n\xaanI\xf6r\ri\x86>\x97\xaa\xae\xf3^aD\xca\x86\x85\x80\xa8\xe2T\xb9f\xb8\xfbAm\xb6\xe0\x99~\x88\xef%\x9f\x10\xe6g\xe5\x19\x03\xc3d\xad\xdb\xa48\x9e|\xfb\xa8:{o\x03\xeaO\xdd\x87\xc3|x\xaf\xf4u0.evjg\x9d\x9dH\xef\xf4\x8d4\x83k@\x04\xf4\x83\x8b\xdd#\xb3Y\x95\x00xL\xa1.aKb)\xb5G^\xd3|\xed\xe1\x14\xc0\x1c\xb4\xdeE\xf0\xda\xc2\x14\xf5df\xd2F\x0eG\x99\xb8\xfe\xca\xc9\xf7\xee\x8c\xd5\v\xdd\xa8F\x05\xd38\xf4\xbb\xa5k(\xc3\xf8~\xa4\xe2\xf4\x10F)\xd5\x80\x9f\xfe)}\xe0\xedS&\xaa\'\xfa\x1b\x14\xbc\xf9C\x88LJ\xf0\x95p\xb4\xac\xaa\xecA\xfa\xf2\x0e\xe6\vv8\xf2\xcd\xc5\a', 0x0) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f00000002c0)) getgid() getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000001c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) pwrite64(r3, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {}, {}, {}]}) keyctl$negate(0xd, 0x0, 0x0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000280)='./file0\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) write$P9_RLERRORu(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1d0096f2503fa303ede7790074656d6367726f757000800000"], 0x19) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') splice(r4, 0x0, r6, 0x0, 0x8100000, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) accept(r1, &(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f00000003c0)=0x80) [ 403.082568] audit: type=1804 audit(1569702161.775:147): pid=16077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="bus" dev="sda1" ino=17330 res=1 20:22:41 executing program 4: syz_open_procfs(0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r0, 0x0, 0x5, &(0x7f0000000080)='syz0\x00'}, 0x30) syz_open_procfs(r1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6) r3 = socket(0x10, 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0) 20:22:41 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r2, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r3 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0x0, 0x0, 0xfffffffffffffdcc}}], 0x400000000000490, 0x0, 0x0) 20:22:42 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000006c0), 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="43ce94e425b7d679e7663faf080200000000000008000a00", @ANYRES32=0x6, @ANYBLOB="1800120008000100767469000c0002000800"], 0x5}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r4 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="6b72646d612088c36e682704c56b1cc592f81680b9e67613cd78425fe3765acffb1f66d622a8335e5ec2f7"], 0x2b) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000000340)=0xe8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'dummy0\x00', r5}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x4000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, &(0x7f0000000000)=0x80000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x8}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, r6, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0c63260092d541228f820ef2cccd8e83ffa67e0ef9826233f03d3d43241ccd845168a261dcbba8ae0b1a0bd8e2fa261568543ae016a05ba6495e9fd589afe86ac5047d6dc566addc6b05fdb1674ff4cb14a369ce7792bd5713621261"], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) 20:22:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000200)='net/Mocksta\xd6\xfc\x99o\xa1\xca\xaf\x9a9\x97o\xd2\xe6\xa6\xddl\x8e\t\x11\x19\xd4\x9a\xce\xddc/\xe90N\x00^7\x1f\x81`\xda\x98\x00]\xaf\xe9\xd74\x9d\x8f|\x86,\x80\xf0\a\x00\x00\x00\x00\x00\x00\x00K\x01\xbd\x0e\xe2\r9Gz\xea\xe9\t\x9d\xcd\xf6\x96\xb4\xd2$^\x1c\x9d\x80\xf6^\x98r\xee\x004\xc7') 20:22:42 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1ff, 0x2) fcntl$setpipe(r3, 0x407, 0xfff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) r5 = gettid() tkill(r5, 0x14) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r8 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r8, r7) r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r6, &(0x7f0000000280)={r8, r9, 0x400}) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:22:42 executing program 0: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 20:22:42 executing program 0: r0 = gettid() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="f95a0f34"], 0x4}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140), 0xc}], 0x100000000000005a}}], 0x1, 0x0) clone(0x20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="7e499f5c5fd21dacb7b35ad2998aca50dedea299e5deb90bd622b9f4a177373afcbc3b5bf61816d9160365cccc061c938047d9953b277929434509c7ecfe9659f8afccc983090dfe92f8ec65fcc8e262ebca23c7e811847e2477054fc0136e136f1c21122803ab2e3a7c209f2ad15cbf989a88b6f264c970c954c01b33dd9e31ea8a7dc73435827acf47ed6c54e943473102300841ecb2e78bd261b870452493a3426094b006c2694acba73746", @ANYBLOB="9f3388c5b87b558d8aedcbb605ebcfca9ba7e5b7f64c5649b18984549fce0580d7f51d938f9377f65353d8f1e87738c76cf8a8e40e"], 0x0, 0xe2}, 0x20) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x30) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 20:22:42 executing program 4: getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f00000009c0)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x40001d0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000100)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 403.667142] ptrace attach of "/root/syz-executor.0"[16113] was attempted by "/root/syz-executor.0"[16114] 20:22:42 executing program 2: syz_open_dev$binder(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x30c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000005c0)=ANY=[@ANYBLOB]) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000000)={0x4, 0x0, 0x80000001, 0x5, 0x0, 0x80000001}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000700)={{{@in6=@dev, @in6=@loopback}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000400)="8cd9c148f3a5bfb3630bc0eff36436642a49e5e777703138c3286e67f38f60b94599365e", &(0x7f0000001340)=""/4096}, 0x20) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x4000, 0x0) 20:22:42 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 20:22:42 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@short={0xb, @dev, @null, 0x1, @bcast}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") close(r0) 20:22:42 executing program 1: prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:22:42 executing program 0: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x141) 20:22:42 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x18a, 0x0, 0x0, 0x2f95a3c3cb55ab4b) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 20:22:42 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000003060501ff0000fffdffff2ef6ff04610c000100060000007d0a01010c0002"], 0x23}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 20:22:42 executing program 0: r0 = socket$packet(0x11, 0x80000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000540)=0x95b5, 0x4) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/188, 0xbc}], 0x1}, 0x0) 20:22:45 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x60407, 0x8) open(0x0, 0x0, 0x0) 20:22:45 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$RTC_VL_CLR(r0, 0x7014) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r2 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x80) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="fbd4814179b75ff7529e1c30c83a20cda9fe9a624f005d8ef46e146583ae8f08775abde7e8a4decf175dd6f96c08d1bb51e561b3e8ec40c3285eb59df7b0e88c0bb41a2df700963944a8640fda7fca7e2392a5e74cd6b083a5db301f95014901a03a89efa8802a89f14fe1425407d98834c49e5b6510ae24049d8ecfdc91e4871cb9c774741b2810d41fa7136a53260a1428c51322831c6af6eb2dfcf341ba96fdb5c6ec8d8692de64e6014cbc92187ffcca17370febfea36fc1ba75d6210701013eb22ad2c998406c1a13a8f11497ae46d04cc52c64b6bb3f21f56e98ff0b15ca99c7679da0cf96a0ffad36e2ff26625f3de9c507522feb52"], 0xfe4e) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r2, 0x0, r3, 0x0, 0xffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = geteuid() sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r5}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}}}, 0xb8}}, 0x20002080) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f00000000c0)=0x2c87, 0x4) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:22:45 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 20:22:45 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x7c, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) 20:22:45 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/sockstat\x00\x81\x00}\xcd\x8c]\xcf\xbelp\xd6\xfc\x99\xef\xa1\xca\xaf\x9a9\x97o\xd2\xe6\xa6\xddl\x8e\t\x11\x19\xd4\x9a\xce\xddc/\xe90N\x00^7\x1f\x81`\xda\xfb\xde]\xaf\xe9\xd74\x9d\x8f|\x86,\x80\xf0l\x8b\x03\xe0U\x83\xd2bK\x01\xbd\x0e\xe259Gz\xea\xe9\t\x9d\xcd\xf6\x96\xb4\xd2$^\x1c\x9d\x80\xf6N\x98r\xee\x004\xc7') ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140), 0x0, 0x0) 20:22:45 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000003060501ff0000fffdffff2ef6ff04610c000100060000007d0a01010c0002"], 0x23}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 20:22:45 executing program 0: openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x400, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xbc4, 0x395}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dsp\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) times(&(0x7f0000000000)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="1d00000000340000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009b89aab49ad30a704aa4f574f493a554bd08b3abf111160c5ee6746a0e9a03b182760e556f17156f9573e220fca116b02eea61fbb4a67b003702e307c1651bbcb8c09d5de2a33ac580443bdc788b1f00f9a3155816be58d23eb1733453372067f9ab361101b5271e4c24642ba2bf25dd22514b92ed55e28140c751b8d4d2a22b00"], 0x74}}, 0x0) 20:22:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) recvfrom$netrom(r1, 0x0, 0x0, 0xbcead1ee2310efda, 0x0, 0x0) 20:22:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) recvfrom$netrom(r1, 0x0, 0x0, 0xbcead1ee2310efda, 0x0, 0x0) 20:22:45 executing program 3: 20:22:45 executing program 3: 20:22:45 executing program 2: 20:22:46 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000000)) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r3, 0x0, 0xffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000040)=0x4, 0x4) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:22:46 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r4, r3) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="f401000024f791b868074eb116fea8b118", @ANYRES16=r5, @ANYBLOB="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"], 0x1f4}, 0x1, 0x0, 0x0, 0x80}, 0x4040844) 20:22:46 executing program 2: 20:22:46 executing program 3: 20:22:46 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000003060501ff0000fffdffff2ef6ff04610c000100060000007d0a01010c0002"], 0x23}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 20:22:46 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) [ 407.679780] selinux_nlmsg_perm: 7 callbacks suppressed [ 407.679791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16173 comm=syz-executor.0 20:22:46 executing program 0: 20:22:46 executing program 2: 20:22:46 executing program 2: 20:22:46 executing program 0: 20:22:46 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 20:22:46 executing program 2: 20:22:46 executing program 3: 20:22:46 executing program 0: 20:22:46 executing program 2: 20:22:46 executing program 1: inotify_init() mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x140) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:22:47 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000003060501ff0000fffdffff2ef6ff04610c000100060000007d0a01010c0002"], 0x23}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 20:22:47 executing program 0: 20:22:47 executing program 3: 20:22:47 executing program 2: 20:22:47 executing program 2: 20:22:47 executing program 3: 20:22:47 executing program 0: 20:22:47 executing program 2: 20:22:47 executing program 0: 20:22:47 executing program 3: 20:22:47 executing program 2: 20:22:47 executing program 1: 20:22:48 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000003060501ff0000fffdffff2ef6ff04610c000100060000007d0a01010c0002"], 0x23}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 20:22:48 executing program 0: 20:22:48 executing program 3: 20:22:48 executing program 2: 20:22:48 executing program 1: 20:22:48 executing program 1: 20:22:48 executing program 0: 20:22:48 executing program 3: 20:22:48 executing program 1: 20:22:48 executing program 2: 20:22:48 executing program 0: 20:22:48 executing program 3: 20:22:48 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000003060501ff0000fffdffff2ef6ff04610c000100060000007d0a01010c0002"], 0x23}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) 20:22:48 executing program 0: 20:22:48 executing program 1: 20:22:48 executing program 3: 20:22:48 executing program 2: 20:22:48 executing program 3: 20:22:48 executing program 0: 20:22:48 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000018007f5f00fe01b2a4a2909302060402fe000001040109003900090035000c021600000019000b4023dc0b00001422dc1338d54400009b84136ef75afb83de4411000500c43ab8220000060cec4f7826de", 0x55}], 0x1, 0x0, 0x0, 0x900000000000000}, 0x0) 20:22:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedV\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) lseek(r1, 0x203ffffd, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357) mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f000007f000/0x1000)=nil) 20:22:49 executing program 0: 20:22:49 executing program 3: 20:22:49 executing program 1: 20:22:49 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000003060501ff0000fffdffff2ef6ff04610c000100060000007d0a01010c0002"], 0x23}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) 20:22:49 executing program 0: 20:22:49 executing program 3: 20:22:49 executing program 1: 20:22:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedV\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) lseek(r1, 0x203ffffd, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357) mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f000007f000/0x1000)=nil) 20:22:49 executing program 3: 20:22:49 executing program 1: 20:22:49 executing program 0: 20:22:49 executing program 3: 20:22:49 executing program 0: 20:22:50 executing program 1: 20:22:50 executing program 3: 20:22:50 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000003060501ff0000fffdffff2ef6ff04610c000100060000007d0a01010c0002"], 0x23}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) 20:22:50 executing program 0: 20:22:50 executing program 1: 20:22:50 executing program 3: 20:22:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedV\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) lseek(r1, 0x203ffffd, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357) mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f000007f000/0x1000)=nil) 20:22:50 executing program 3: 20:22:50 executing program 1: 20:22:50 executing program 0: 20:22:50 executing program 1: 20:22:50 executing program 3: 20:22:50 executing program 0: 20:22:50 executing program 3: 20:22:51 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 20:22:51 executing program 1: 20:22:51 executing program 0: 20:22:51 executing program 3: 20:22:51 executing program 2: 20:22:51 executing program 1: 20:22:51 executing program 3: 20:22:51 executing program 0: 20:22:51 executing program 2: 20:22:51 executing program 1: 20:22:51 executing program 3: 20:22:51 executing program 0: 20:22:52 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 20:22:52 executing program 2: 20:22:52 executing program 1: 20:22:52 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x200, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000080)) 20:22:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000002d40)='reiserfs\x00', &(0x7f0000002fc0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f000000a300)={[{@grpjquota='grpjquota', 0x3d}]}) 20:22:52 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r4, r3) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r6 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r6, r5) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x80000000}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000040)={0x2, r7, 0x10003, 0x3}) 20:22:52 executing program 1: move_pages(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000015000/0x2000)=nil], &(0x7f00000002c0), 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='events\x00\x00\x00\xc7\xaa\xff\x0f\xb0\xc7\x9b\x93\x91\xe4\xaedY\xd8\x00\x00\x00\x00\x00', 0xf0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x40086607, &(0x7f00000001c0)={0x3003319687907364, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) 20:22:52 executing program 2: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$RTC_VL_CLR(r0, 0x7014) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r2 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x80) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="fbd4814179b75ff7529e1c30c83a20cda9fe9a624f005d8ef46e146583ae8f08775abde7e8a4decf175dd6f96c08d1bb51e561b3e8ec40c3285eb59df7b0e88c0bb41a2df700963944a8640fda7fca7e2392a5e74cd6b083a5db301f95014901a03a89efa8802a89f14fe1425407d98834c49e5b6510ae24049d8ecfdc91e4871cb9c774741b2810d41fa7136a53260a1428c51322831c6af6eb2dfcf341ba96fdb5c6ec8d8692de64e6014cbc92187ffcca17370febfea36fc1ba75d6210701013eb22ad2c998406c1a13a8f11497ae46d04cc52c64b6bb3f21f56e98ff0b15ca99c7679da0cf96a0ffad36e2ff26625f3de9c507522feb52"], 0xfe4e) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r2, 0x0, r3, 0x0, 0xffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = geteuid() sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r5}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}}}, 0xb8}}, 0x20002080) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f00000000c0)=0x2c87, 0x4) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:22:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000240)) read$rfkill(r1, &(0x7f00000001c0), 0x8) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) [ 413.727589] EXT4-fs warning (device sda1): ext4_group_extend:1764: will only finish group (524288 blocks, 256 new) [ 413.739327] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 20:22:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000240)) read$rfkill(r1, &(0x7f00000001c0), 0x8) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) [ 413.783866] EXT4-fs warning (device sda1): ext4_group_extend:1770: can't read last block, resize aborted 20:22:52 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000240)) read$rfkill(r1, &(0x7f00000001c0), 0x8) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) 20:22:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) [ 413.941288] sg_write: 7 callbacks suppressed [ 413.941358] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 413.941358] program syz-executor.1 not setting count and/or reply_len properly 20:22:53 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 20:22:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x111b01, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000240)) read$rfkill(r1, &(0x7f00000001c0), 0x8) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) 20:22:53 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) socketpair(0x10, 0x3, 0x24, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000240)={0x2, 0x8, 0x855f, 0x7}, &(0x7f00000002c0)=0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000780)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779a05c5c5a09000000ecf323c935ba26eab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc082b7bcdec844f667da0860700000000000000000000000000000000ebc53db0f533e8d15d34bf", 0x82, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)}, 0x10000) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r4, r3) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x57445b7c03c4b4ac, 0x48) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:53 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x4) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:22:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(r1) prctl$PR_SET_PDEATHSIG(0x1, 0xe) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r4, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r5, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r7, 0x0) r8 = getegid() r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r9, 0x0, 0x484, &(0x7f0000000400)=""/142, &(0x7f00000002c0)=0x8e) stat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x1, &(0x7f00000003c0)=[r10]) fsetxattr$system_posix_acl(r2, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [{0x2, 0x0, r3}, {0x2, 0x2, r4}, {0x2, 0x8, r5}, {0x2, 0x2, r6}, {0x2, 0x0, r7}], {0x4, 0x2}, [{0x8, 0x4, r8}, {0x8, 0x4, r10}], {}, {0x20, 0x4}}, 0x5c, 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2805) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) [ 414.574341] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 414.574341] program syz-executor.1 not setting count and/or reply_len properly 20:22:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@generic={0x1, 0x9, 0xd8}) 20:22:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(r1) prctl$PR_SET_PDEATHSIG(0x1, 0xe) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r4, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r5, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r7, 0x0) r8 = getegid() r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r9, 0x0, 0x484, &(0x7f0000000400)=""/142, &(0x7f00000002c0)=0x8e) stat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x1, &(0x7f00000003c0)=[r10]) fsetxattr$system_posix_acl(r2, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [{0x2, 0x0, r3}, {0x2, 0x2, r4}, {0x2, 0x8, r5}, {0x2, 0x2, r6}, {0x2, 0x0, r7}], {0x4, 0x2}, [{0x8, 0x4, r8}, {0x8, 0x4, r10}], {}, {0x20, 0x4}}, 0x5c, 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) [ 414.836960] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 414.836960] program syz-executor.2 not setting count and/or reply_len properly 20:22:54 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000003060501ff0000fffdffff2ef6ff04610c000100060000007d0a01010c0002"], 0x23}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 20:22:54 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x503002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180)={0x2a9e095c, 0x3, 0x1, 0x1, 0x3}, 0x14) r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r1, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0xc0c600, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb636be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000200)=0x6) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)={&(0x7f00000001c0)='./file0\x00', 0x1}, 0x10) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r4 = syz_open_dev$sndctrl(&(0x7f0000000300)='/dev/snd/controlC#\x00', 0x0, 0x501201) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000002c0)={0xae000000, 0x5, 0x6, 0x1ff, 0x7}) 20:22:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@generic={0x1, 0x9, 0xd8}) 20:22:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(r1) prctl$PR_SET_PDEATHSIG(0x1, 0xe) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r4, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r5, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r7, 0x0) r8 = getegid() r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r9, 0x0, 0x484, &(0x7f0000000400)=""/142, &(0x7f00000002c0)=0x8e) stat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x1, &(0x7f00000003c0)=[r10]) fsetxattr$system_posix_acl(r2, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [{0x2, 0x0, r3}, {0x2, 0x2, r4}, {0x2, 0x8, r5}, {0x2, 0x2, r6}, {0x2, 0x0, r7}], {0x4, 0x2}, [{0x8, 0x4, r8}, {0x8, 0x4, r10}], {}, {0x20, 0x4}}, 0x5c, 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:22:54 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="e4"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:22:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@generic={0x1, 0x9, 0xd8}) [ 415.405639] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 415.405639] program syz-executor.1 not setting count and/or reply_len properly 20:22:54 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) dup2(0xffffffffffffffff, r2) 20:22:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) dup2(0xffffffffffffffff, r2) 20:22:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x405) [ 415.472794] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 415.472794] program syz-executor.2 not setting count and/or reply_len properly 20:22:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x405) [ 415.571787] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 415.571787] program syz-executor.1 not setting count and/or reply_len properly 20:22:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x405) [ 415.718368] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 415.718368] program syz-executor.2 not setting count and/or reply_len properly 20:22:54 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x290000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000180)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r2}) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) dup2(0xffffffffffffffff, r2) 20:22:54 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000003060501ff0000fffdffff2ef6ff04610c000100060000007d0a01010c0002"], 0x23}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 20:22:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x405) 20:22:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) r1 = socket$isdn_base(0x22, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000180)=""/131, &(0x7f0000000240)=0x83) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000880)='/dev/cec#\x00', 0x1, 0x2) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000280)=0x85) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:54 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) syz_mount_image$f2fs(&(0x7f0000000280)='f2fs\x00', &(0x7f0000001400)='./file0\x00', 0x6, 0x6, &(0x7f0000001800)=[{&(0x7f0000001440)="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", 0xfb, 0x6}, {&(0x7f0000001540)="ba95e8084b2369cc6fd01520148928f85b50db74a81583e99de2d44f42c6da2a7db73dda3d1ea031f5abe9c1fb8ab9ad44c42478b781ecc4b70689beb32eb8bd1ca5300e778e8c663b67dffb33afa6781ed57230c618e5b32f23b54c4ff9878d55fff9f50b7eae11cd44d2cd92456ae5be3cdce45f2bcea97412c112ef5e7e6bace6d79be325ceda67718ff92c0e8ed4379d9fef38cb45232c70784e27172a90140f63b170b25a", 0xa7}, {&(0x7f0000001600)="4c082778e7c31710ed80970dd77b172b5a1cb9fae08498992ba5cc23a60f7ff3c199ecf5f299eaafc1cfeb7e4bf9033901647d42e29411e3e0aeb7abd04b445435901dafda264bc064fda08fb7a03bcb9381f1d421f00eb1274c379ca0ab51bcaf3f503fdf5dbd655912ff822c6c894e3a3ea38ffd8d1de20b945c44698e4b18e35fd175caea26d852a1b4b0cf7f299006e0bb6d84824dae1d", 0x99, 0x9}, {&(0x7f00000016c0)="bb0030f90caddeb54ae91870865cf6b0998e9f3c6e5fa491a2080e696cd7edace9f2bad410dd4dc76cdc33f921ced084277d539f027dec", 0x37, 0xffffffffffffffff}, {&(0x7f0000001700)="b40e27c12dc3206eca5005708bbf904d7a7a7677d06095c0974c7d84e184f70435c608e0d686c6338bc7fc94772c1934c1a882f6492bc6603a06fd81c6cf11a5deadbee99461470e1e8c1fb1e35a6b18599885fcc14f9aa98b9ee63f31651a77c90e953df9c9fc526ad0c4e4df36969d679d443a1146bc06d9558749b40a723fcda1b2ca11aee9ae5e1efdb97cf82bfa19f345e7e2c9b0e9051bf33bad4fd8fa81785ea2d19c9e9571a465aa6a4bccbea50c36699e18", 0xb6, 0x4}, {&(0x7f00000017c0), 0x0, 0x1}], 0x1880000, &(0x7f00000018c0)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, 'dax'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./bus\x00', 0x20, 0x2, &(0x7f0000000140)=[{&(0x7f0000000300)="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", 0x1000, 0x40}, {&(0x7f0000001300)="9b25c6aa575e30bd8961b6de46da9c8cdace10519880945d2ff0e544bfc0c3a2a86dcacfecd449611774bfaf8b3ea443ad55dc67d342054ab71d15d1fba8dafe0ed12d0444c041dd53780f77ec2dc257ec3679ceb23ef0af7901a4819cecdfe97097c08edf7cca0f79f9a2a9854a75b51a36a93312", 0x75, 0xbded}], 0x400, &(0x7f0000001380)={[{@user_xattr='user_xattr'}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nombcache='nombcache'}, {@dax='dax'}, {@grpjquota_path={'grpjquota', 0x3d, './file0/file0'}}, {@debug='debug'}], [{@pcr={'pcr', 0x3d, 0x3c}}]}) 20:22:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) dup2(0xffffffffffffffff, r2) 20:22:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) [ 416.324859] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 416.324859] program syz-executor.1 not setting count and/or reply_len properly [ 416.331365] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 416.331365] program syz-executor.2 not setting count and/or reply_len properly 20:22:55 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) 20:22:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f00000001c0)={0x5, 0x3, 0xffffffff, 0x8, 0x8}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:55 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000280)) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000400)={0x1, 0x1000, "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"}) 20:22:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) [ 416.486400] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 416.486400] program syz-executor.1 not setting count and/or reply_len properly [ 416.538895] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 20:22:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f00000001c0)={0x5, 0x3, 0xffffffff, 0x8, 0x8}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) 20:22:55 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000003060501ff0000fffdffff2ef6ff04610c000100060000007d0a01010c0002"], 0x23}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 20:22:55 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r2, r1) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r4, r3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r9, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r9, {0x0, 0xe}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000380)=r9) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000040)={0x1}) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r11, 0xc0406618, &(0x7f0000000400)={{0x3, 0x0, @reserved="947622277f8fffad8aa7e80109bba8643c8c50f39f81c8be3898a9b57291b364"}}) r12 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r12, r10) r13 = syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x2, 0x101000) getsockopt$packet_int(r13, 0x107, 0x10, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$EVIOCGABS2F(r12, 0x8018456f, &(0x7f0000000180)=""/202) 20:22:55 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000280)) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000400)={0x1, 0x1000, "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"}) 20:22:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f00000001c0)={0x5, 0x3, 0xffffffff, 0x8, 0x8}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='bcsf0\x00'}) 20:22:55 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x1210, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0x6ed77537) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x1000000000000000}}}, 0xb8}}, 0x0) splice(r3, 0x0, r1, 0x0, 0xffffffff, 0x8) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:22:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x5, 0x100) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f00000001c0)={0x0, 0xfffffffe, 0x1ff, [], &(0x7f0000000180)=0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='bcsf0\x00'}) 20:22:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x2, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000ca6f9aac0bf0ad7eeeefca6d272424cdd10a60064b773ad487b172bfc1ebccac4e05a5f5bcba76b0385ea061b0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000180)=@v1={0x0, @aes128, 0x4, "061c96d658a738bf"}) 20:22:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x5, 0x100) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f00000001c0)={0x0, 0xfffffffe, 0x1ff, [], &(0x7f0000000180)=0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='bcsf0\x00'}) 20:22:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x5, 0x100) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f00000001c0)={0x0, 0xfffffffe, 0x1ff, [], &(0x7f0000000180)=0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:56 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000003060501ff0000fffdffff2ef6ff04610c000100060000007d0a01010c0002"], 0x23}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 20:22:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x2, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000ca6f9aac0bf0ad7eeeefca6d272424cdd10a60064b773ad487b172bfc1ebccac4e05a5f5bcba76b0385ea061b0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000180)=@v1={0x0, @aes128, 0x4, "061c96d658a738bf"}) 20:22:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x2, 0x2000) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x2}) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:56 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460173cad0eb35d06f27429027440a5607b82695cbf1a19be42958b5701c80adc1aba90b3e91febfc4a8b0aa73bc61f7515362ac6cb145b7df12ae1ccb151d8dd0b18d5947af76381afff212e8b1fe439fd8af9148c0d2453c3fef748d6e586367976a371bcbf41bd3ff49e743afe3e8bbe87", 0xa5}, {&(0x7f0000000240)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:56 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000040)) mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x9c246fa026eed117, 0x150) r2 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'], 0xfe4e) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r2, 0x0, r3, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:22:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x2, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000ca6f9aac0bf0ad7eeeefca6d272424cdd10a60064b773ad487b172bfc1ebccac4e05a5f5bcba76b0385ea061b0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000180)=@v1={0x0, @aes128, 0x4, "061c96d658a738bf"}) 20:22:56 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460173cad0eb35d06f27429027440a5607b82695cbf1a19be42958b5701c80adc1aba90b3e91febfc4a8b0aa73bc61f7515362ac6cb145b7df12ae1ccb151d8dd0b18d5947af76381afff212e8b1fe439fd8af9148c0d2453c3fef748d6e586367976a371bcbf41bd3ff49e743afe3e8bbe87", 0xa5}, {&(0x7f0000000240)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x2, 0x2000) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x2}) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x2, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000ca6f9aac0bf0ad7eeeefca6d272424cdd10a60064b773ad487b172bfc1ebccac4e05a5f5bcba76b0385ea061b0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000180)=@v1={0x0, @aes128, 0x4, "061c96d658a738bf"}) 20:22:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x2, 0x2000) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x2}) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:57 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r2, r1) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000180)={0x0, 0xfffffffb, 0x4, &(0x7f0000000040)=0x3}) r3 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='\x00', 0xfffffffffffffffe) keyctl$set_timeout(0xf, r3, 0x3) 20:22:57 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000003060501ff0000fffdffff2ef6ff04610c000100060000007d0a01010c0002"], 0x23}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 20:22:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x1f, 0x200400) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000001c0)={r3, 0x4, 0x30c}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(0xffffffffffffffff) memfd_create(&(0x7f0000000200)='\'cpuset*\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) pipe2(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2) getpid() r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2404c8c1, &(0x7f0000000180)={0xa, 0x400000000004e24, 0x0, @mcast2}, 0x1c) sendto$inet6(r2, &(0x7f00000003c0)="f8", 0xffb3, 0x4000000, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000400)="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", 0x1b4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000005c0)="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", 0x12c}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r6 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ftruncate(r6, 0x5) 20:22:57 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r2, r1) write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000024c0)=[{&(0x7f0000000000)="3db3915aec8034d4093a061cc48479e0e213029e83e6cecd62468913fac2ca88c508090d161e9fa21cc507288567c768b6ed71dd5338103146c91ad6ca16c1017d12c6d4b9de5c492fa0ef4a205c55b8811a6d3af87a55cd", 0x58}, {&(0x7f0000000140)="d27bc9db7b6b6b4111551ec2364978e8bd5c72884ce0e8cb9d08336992f5a36cc41631ab7a31138536dcb265467f282b", 0x30}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="3b1ca24336e4e196d953d523b030e0", 0xf}, {&(0x7f0000001300)="17d928f908bbcdeffd2e2c76c511a86bf3cb17df7bf1b1a25df940b0c8169ff5b162ad60ded8b8e93100b630aefca94fbaf83e1deada6ee42a4cd279908ef08d2aadf485e7655bfb2bbdec0d1a6873a5e707399695976cff56be2f88a9240b3daf491ddb451966960526a5b1afcde1a01a7dbe8300a5323b79343bfc99d5b481b65f6af10bddeefd9e55389b00282e3b396d9785ff8bb42f0951f8fa0aaa99bc2cd6c685f3bc91ef1e", 0xa9}, {&(0x7f00000013c0)="b6a46cf449864de0ae877614bcf8e8c3d790cd9fa291e4267aeecd8e9879338df7b635dee5d3c06d42b80f73c3d0b6cceea7fd9f075df50c0ce03a50ae1328b74f033f6266b4dd92093e1ee32937d59a312a5754cb315fdfce8673b29edfc3d58357c970a17897b222a38bc98b7c527a71e9aeb574567b5139da6ea8f16f024b3d4936f01909dc6dfeb82c972614f36898743e018e5f3614360247c1e1bb50e5726a998f415ce887fe10c808e7aa88618b2ac7a1b8536ad74bbf1d321a43416f7d0b3c988817f6c6a4ef39a418d71c38abd712b31b8490e9450402f748125aba4d8c5da821cf4a", 0xe7}, {&(0x7f00000014c0)="2662b3008a0043db3bd6e016568b10105521fbf5cfcf52dba854fa3d1127c35aabdbfb892e048625461ed0ce9701bf4f4a320730b9eac1504ef00d0367cfe7dd49390b4564d6fdc84fc1a6b43053edacf9107427baf55043912e2b544c92784bc05c773eb3b94b495f2c909a2bc9e6363786a39df8967bf01380915c6e31f2a502c5ef4398456db8ae80c98a4cda782c2c0378046ca7e9a006ace255a4c9825a40fb1a853295228146c312ec4d1c664fa4de5eddf4ac78d490e144c54317ab10551de592eb307dcf14b1686956f143cb00c53613214e733496ba6cd032e6c9fd627b2c5af309851c00eefa3677d49e5cd96aa5cf08ca355526cdac59a17bc3b4e92d441b8beb493e1a87551655324d3a125220a00da568b68123de19adeb237c0facdf2a7d79f45e19579d1819574129f0b002a03bddd167c6609b8e5298a6f28bc466432d52bf76d2044f77f573acd6dbe78e44e165fe2b03892e3d392fdea1db03626d21c5a0ea00be05f2d93f4f0a3bde7dce266a5eb73ea8b2de7ad9505c4bf37e8b61d027498fb5127682e81fbf349a3f22d18ffca297945489f78e9288a0efd42fd15b4ee6400d09d761b0a9bcabee0f433c819961e3ad78ef7f565b8432cd16337826d7cf285c12a4a4129e1ec2f4fca8676e87463fb62aff1c7895ce958b42888d923722e90a11e7216bc137a553ea2fa53052bc0d19f8d6a4768ccaf4ff7e9838a13e7357b52ce36dd87e0b75cbe89400fe56e2ce5be43e9e53431642fafca80199d02f573a7749f1f9ab41af29ef219afb8431f7a16f93debe477ace09881ed9e6b5e41be1e42c78979da8ead4d6c0fd7adf1d1ef4d49a5fd38ad2388fe8194424403a02e49f84c94a3f34c3d6f9313d74a1483efbfb17199c9afae53667abd3ac8fa4d50e774ae03a299b8f522438752321753a9cb97a456ac669f940dfa3f9ce584b633d4984dde53b8c9815168f25219fe0156b61566ad9fc6919222dc2fc87cbf88d7447a3b8658d920bd66b0fcaf416eb50bab880d596b7a1e3b23895eed42736c6084076da94a4c1d20d90af2f76323dcecb5fb6b1a3c60132c0d91cc5c8b299801f0645f30ac630a953dc7344b075cf549b7a6ffb19e8d4295b5dd3c57ecd6a9436c43a30e11f43dc790d1df675ce67eac40aa92fbaf60dbcdc83e32b2018841ff1d8e6677d1b20e473d890e80e3cdcb1c83b85a73c4c87d62fef62ac47b9f9a5740b29cdad0e9d24582ff6bfacdbc25ee0fd4d70ecc74fe0a20176aa32d3baa0db13156f5bc68aabe7d7a289a5145604709dc9e3862db45ff595518a3599f37a8a13aeedf140a1518784c108f7fa5bd4917b83b4bb87168ffb823854c50b9f9e1b5d3a96b9e3374896f1542d5b3f09a14052c27d08c1d8868a61ccdff13da5a063303b68f556ec3b22d40924ea77becb1a9237046c1d45b1a73d610a7e5d724bd8a3c1675a6071f04103169e5e299546f80f859c4e8ff9febf8754991c809d2b66401e829937abc82503c5424cc40c20be36e1b2c5b0b4ce1e019bb02e97b871fbac2c14f0f19c60a70b29147ddc269e17c77c5df4470f1f630b113127829391deaba95e2648c252bec3f0600229875489b3a97d10c350972101318f90dc33fcd529ee461b2e7678cfc49c722e63ca5c0f6ff2d3b6d594943305b0893f893038e89d1661812f188936b693cb6952b8e84e24738277c4783139a1c8e54932fc3f741644cdf4ef4aed882cc0acf60e4a9a9a3277d730b4c96eb042c400bcff1518188b33fca7a3502baac2d7ef006778425add76a52f5e4f2c1bc6cdd77c36dafc149f6f1c40f8b65ac7366283a95e73ddad2e0d9a63c479931e04009e6957b7098e9bc7ea29e19acf69ce5148af07d158e3e716b53a3a1a5d00baf29a69838b1560341076578783c25fcd3112e26c6684d1b25dcfdbf2245c3ac3d0f1c6175c46a45dbb872325f162fcd650c2a7f6d62f0b4ea6c247fb711db092886e2d6cbebe19c4e38b9c53a0caa43ff7a65df7c6f7067e59a83c28ea52fcb3efbc8ab383bb34f6d76feed6ba086dc4eebfc61b3bf8736e4552ad080647799863da8563f72df378f1209014e8d1602f6075c10b90dd3dc186319443cfedefffd7f27fb0ae25aeafa1d29ebb60b14552cb6915120385b5e26eb92a5c0346c1fc4c0d89f4e1025609ca68e5d1afd7b0dccec5d2d80a6c7798542ba45688b1dcff8b278f49fc8e3ae8c4c77e9b0d0f8472315bdd72f8f75c5019d0ac0167243035ae438655a834891e500b0c26763d320adfdc11284ea6a798397d939c382affc1d8af6f55b73f279219b72f4ce2666050612f1b5c5e555529f909161c23b0e950706c4345213d702ad040f9f2c3972175d4d533398d7cf5fa77a93c5122becc40ef253e1568c2a332934a99d989915e26c86d99b0519a83b053cbb7fef51d147ef516415aac19a41ccc6b9b6f5bc40a69f865040cb781e09df501e3e1ac0ad291bff051f50866072b07a15f0bbc9fb18b710555490dbe95a18257a7334f94b7f5dc0bf3454beb23cb44f0e942e539fd54c8b65f41dd2f27c98b422c5e02e87979c218f7ce187e82bc66481bee4411de9dac8136d9e496c0b1c0f57b4809bd514973ee5af28a11828f4dc074fd2d12e60825aeaafe980211ffc37f695c539103ffe15c12ec25634517b579764af700606244810de333656d352d7d7ca9df016a61eecb86d265ecf01d1322ebb1eb8c7f3b992074149d052486df0a7b144fc452130f3e59be4feeb10571cf31bf14818cfd52d291a59a3a7400026e3cbe36c3552f178f84f6f6f5f83e3876f1a861f2f364409d0d178ab8674bdf13660c8d0b5793d825d2c2cad146c429925584ab5149c9381ce818ec0fe460d444ca4a5eb953a048fcb8d90541b46c11712e613bbc58a6b4a2262e3ebe59681ef2f8ef895ed1602f4d19576fd0a819e91c57152f6218daef832488ac554009eefb8ceadb3311b58f2b32e5ff924562845eb0dcf94e101db288015e7840f3f149771c7843ee0e3315aea38b01ee0bdc67a9501833046ed2c5b3341d599dfc9a4359d0fefbd300eb8ad4ca0a716d4d32fdac1889b864739cbdcb3d7ecac23c09eec02452d61cc22d7f1f751c4926247591ec31f15281ce31ef2167a865f787ea83046c6ae9144265adc22749e4c1cc8db832bb1f249613b75e33ebe34b4c1ff1484f9214594b4264d183e22f55fae2378bd9062aa3ae812b690b5f5f3fbfccbd6e65e47742789139ef773251da904178aa6e1d53dcbcdf1b0ee1ac0a7388f20837c96f247f4f3b4ebcf6fdd347e3db26d3b96253b494c7cac53459d1d84f6e9e1bcdfe031f02f4d7ca40792ceeb38148aa4e06498a8cbf82bae5753fa39434c8ba2b91ff70b044ec28a5ce4c499b0c38e233b901b24143d6ea75f080bb28b7971f94085301ad7e30eabc824d9cdc5962e35e471410d971ac6dc0aeaea0321f0d2779f421460aaee78b18bec8904d5189ca63bd5165bd24e7dc291e0d1f5b26e8f4fb4884835681b08e020d8c0bab0e3d64f94e636a4a7687e6bba55aaf51f7fa0a35db9a208ff80282e40551d03c69331433007da1d987db8445987f347a80c24206ed56eef5c1916ac2caae4ef0c53d8d9f25f8f8cf75e30b811ccc8b4f9044e7e72c531632ebf6aa92d8a3006cc72a7e2972d11673b47bebca0e878bae2eba3a3ac5ef5f0b289ff098f624a31f1397307051aa5469cc2df4b359653bd314558c75996502dd2d087f73be7a805800463ae88dcdbcc856f98f4fd30d0ba3032a2ada22436083a1722404cd5f516341a1b376a937b619876db40e452ea2dce5485d70482348218e00d79fa5ad41e694a46cd755ee70572860708c763709833f9a01e6db014074f13a9680b520fc2a378d9145137c88f1284664c21f67290845519634f84a376a36005bb1c516c8fc84f5a623bf94ff942bb5cdc063cf130d4657f33986d799630606fbf961e1a658ef12ae73f840d8bd27b1b2d16a2fa6d5db4942fa090f0c3b3423a633cb008e58dd4976a20650ea2ae94a2a967623ef1f5d0f79113dcc1c58d785ffcdf963816de6b9934064699de03791ab4ff836e46fdd82fd14e79422e5a2bca4260433f57d4bbfc4aac87622e1f93be92c7e32037360380fa90d0c1df71713ef8d221bf0e6cad7e48c2ed7d8284e67a67dd6a5afc0015c6fb27ac93aaaf052ae2d3b33e12424909664b9d3af08a449e64dde494276ae4fcffed7c69fb44351063ed9bfd215bb21cebbe88d42834bdcb086017148b4c257219998152906211303e610bb43836a28afde490824a817a3c109606648e80aab6e9b44069fad7bb6cd8c89f31c649710bbb18beb94be4be3301a07803ccc40e40df6f77b965a6db5b3c05e76dab4123f42905d745983c21bde4b8d7a528652e77e523d27e0e32c6c2e2fe7465f595372427a8edfa5a3345bca984d2ede022f28c08197535e5e71a15475fe4626aaac6a21230de06498c9ae3dc0f38f8286c133a6f1fedfa80ed8a4cec1cf7e9eca9ede61817b2380d17303ddfd14aec91ea00411a97b8de200c73eff9da279c5c35832cdc15cce3206d8e40507937606f67ab1052fc9bbb1dd1023bda5c75fa142bce8385dcb938ef5add3a1da4ce463d640e6fbf0fe4811e4f66fe07de653d48a5576cdcbd14e2eb073d6224815b39828cbc798f802912ab2a9ef4266b7a24cdd8c7782c389b45dc70eeb4344c392775bff98f796b2cb6086f9e163e53b03ab7459d22921737f6cbfa1d278d327877e1f06a9733bdb95df8f841ecda4625677d67bf90b3de63dbb0b98fa2c92fffa53a5b146abc8522843aca930552c79f387cd14de9bb8c16f1086102473bfa5a41c01f3ee642b321a1b99bb6fe109c182e75fcf38d5ad42e80a9258023a44e5bf9efcd918f09f4d977c575773d0d761961bb0d834457513196d1992738ef7d386e8a2455647b4567eb4d5c27c0b093b89f352b53e5bcea5eb9daa19fa4f3bd7cad2017bcc92456ae98ba6099c60c4f53cca2dae247229c8d6705f4b9dedb7239513d6e7c52848940bf91f0222045d7cf7d7bdb8622b52ccb29acefc8f3c20aff919fb2d5c755a8a2968a019152a1c0396a7337dcd53df24f54fab62aa68655684b76dcb7b6cc1369c868ed2a4b9888e6a0be848b688bc43ff3ef63245272d0aab3e8282ea944f4386ea37c26687b5851c5feab56cf736b4e7e78f8fda4b5cadb6bfc7b122d5933458c97e3bc3e4d1357f592f41367fc29f8c9dddb49abb6e8313093a474e8a12d422cb36fe8732228b4418f16e1b937f7ff33bb1b2220b1d053f984bd899b5dcc87278dfbbe7e88c3efa30950c66795495bb177e83003cff98be0fb4855b2f59ad4ef9754ee7bc1fba769470e0dd4e0e69eabafea9e79a7472bf5b6b32bfceeeb7aad7389d4b3b8f30e8586c09b4878516c712d104072997d383ed516ebe91f40e7d8faaf2ba34037f513cd6e466ba41ed181f1674baf07700676ce71978be522835d9451a43274eb82b0e0de499463d10654cfa64f4edce3b2793d6b0e1af8a4e6eb2e7e574abdfd05689cbf905ae1e04a14ef92306aa4a47fd785f83ad02aa01146de170f3bf8660582a199adb434813a0176a50b3960c59b49f60d8b4715b587e1b21fb823e1dc5fbea8433538c7150902e64312a19321ddfeaca3819e4e5a7c29fe5e2074e85118c0dad2a7451774cd9f888032fa68e315afb24847191ab6eb054d2ee6409fe82801edfed5b087142b8e05178892ca1df58726e89d17d9ca6e542", 0x1000}], 0x7, 0xc) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r0, 0x0, r3, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:22:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) [ 418.957580] sg_write: 8 callbacks suppressed [ 418.957589] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 418.957589] program syz-executor.1 not setting count and/or reply_len properly 20:22:57 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@generic={0x1, 0x40000000fffffffd, 0x10000}) 20:22:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) [ 419.071541] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 419.071541] program syz-executor.1 not setting count and/or reply_len properly 20:22:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff0100000000000000000000000001000080000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r2, r1) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=0x1000) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x200, 0x0) ioctl$FICLONE(r0, 0x40049409, r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfe, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x1000}, 0x0, 0x3}}, 0xb8}}, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x0) ioctl$TIOCSTI(r5, 0x5412, 0x1f45) 20:22:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cachefiles\x00', 0x199301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x4, 0x84) accept(r1, &(0x7f0000000180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000200)=0x80) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000400)={'rose0\x00', 0x200, 0x9}) dup2(r4, r3) getpeername$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@dev={0xfe, 0x80, [], 0x25}, 0x5b, r5}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:57 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x2afe5dd18a981556, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000001c0)=0x2, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cachefiles\x00', 0x199301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x4, 0x84) accept(r1, &(0x7f0000000180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000200)=0x80) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000400)={'rose0\x00', 0x200, 0x9}) dup2(r4, r3) getpeername$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@dev={0xfe, 0x80, [], 0x25}, 0x5b, r5}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) [ 419.286221] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 419.286221] program syz-executor.1 not setting count and/or reply_len properly 20:22:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x1f, 0x200400) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000001c0)={r3, 0x4, 0x30c}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:58 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000003060501ff0000fffdffff2ef6ff04610c000100060000007d0a01010c0002"], 0x23}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 20:22:58 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x2afe5dd18a981556, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000001c0)=0x2, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cachefiles\x00', 0x199301, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x4, 0x84) accept(r1, &(0x7f0000000180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000200)=0x80) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000400)={'rose0\x00', 0x200, 0x9}) dup2(r4, r3) getpeername$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@dev={0xfe, 0x80, [], 0x25}, 0x5b, r5}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) [ 419.803113] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 419.803113] program syz-executor.1 not setting count and/or reply_len properly 20:22:58 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:22:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) r3 = dup2(r2, r1) faccessat(r2, &(0x7f0000000180)='./file0\x00', 0x8, 0x800) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) lsetxattr$security_ima(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f0000000340)=@v2={0x3, 0x1, 0xc, 0x8, 0x16, "202d2235fd4c142b59aecef544cf1026eb1742ee6028"}, 0x20, 0x2) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r7 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r7, r6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x5) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r8}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={r8, 0x1}, 0x8) socket$vsock_dgram(0x28, 0x2, 0x0) 20:22:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) r3 = dup2(r2, r1) faccessat(r2, &(0x7f0000000180)='./file0\x00', 0x8, 0x800) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) lsetxattr$security_ima(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f0000000340)=@v2={0x3, 0x1, 0xc, 0x8, 0x16, "202d2235fd4c142b59aecef544cf1026eb1742ee6028"}, 0x20, 0x2) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r7 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r7, r6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x5) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r8}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={r8, 0x1}, 0x8) socket$vsock_dgram(0x28, 0x2, 0x0) 20:22:58 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r2 = fcntl$getown(r1, 0x9) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r4, r3) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000380)=0x0) setpgid(r2, r5) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x1, 0x1, 0x6, 0x9, 0x0, 0x1, 0x6c1a0, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000040), 0x8}, 0x468, 0x9, 0x3, 0x4, 0x5, 0x3f, 0x3ff}, 0x0, 0x6, 0xffffffffffffffff, 0x1f) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000040)={r8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000400)={r8, 0x2}, &(0x7f0000000440)=0x8) r9 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r9, r6) epoll_wait(r6, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x7) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) [ 420.108360] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 420.108360] program syz-executor.2 not setting count and/or reply_len properly [ 420.122119] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 420.122119] program syz-executor.1 not setting count and/or reply_len properly 20:22:59 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:22:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x1f, 0x200400) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000001c0)={r3, 0x4, 0x30c}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:59 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000003060501ff0000fffdffff2ef6ff04610c000100060000007d0a01010c0002"], 0x23}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 20:22:59 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYPTR64=&(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYPTR, @ANYRESDEC=0x0, @ANYRESDEC=r5, @ANYRES64=r6, @ANYRES32, @ANYRESHEX=r0, @ANYRESOCT], @ANYRESHEX=0x0, @ANYRESOCT=r7], @ANYRES64=0x0, @ANYRES64, @ANYBLOB="2e60f48a86486384325acb0d8e9e990baeb7f9932f8bf58fc0f1d899acd4aa9d4d4c5155beb438533725b25294232cdd162b81f8c6345cb95a20b2399fe97052644b00664b23606f7ee4742b6ff6f6ce4fa36248d7d82f29cf1d940c30970b592e7d8a4d1d7126b3f56eae61aa30663f20b5a7520392220a1e89eb2ba71deda7ab671a5834063d79"], 0xa0) r8 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000140)={0xfffffff, 0x6f, 0x4, [], &(0x7f0000000040)={0x9b0905, 0x800, [], @p_u32=&(0x7f0000000000)=0x5}}) write$P9_RATTACH(r8, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r8, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) 20:22:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) r3 = dup2(r2, r1) faccessat(r2, &(0x7f0000000180)='./file0\x00', 0x8, 0x800) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) lsetxattr$security_ima(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f0000000340)=@v2={0x3, 0x1, 0xc, 0x8, 0x16, "202d2235fd4c142b59aecef544cf1026eb1742ee6028"}, 0x20, 0x2) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r7 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r7, r6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x5) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r8}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={r8, 0x1}, 0x8) socket$vsock_dgram(0x28, 0x2, 0x0) 20:22:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) r3 = dup2(r2, r1) faccessat(r2, &(0x7f0000000180)='./file0\x00', 0x8, 0x800) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) lsetxattr$security_ima(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f0000000340)=@v2={0x3, 0x1, 0xc, 0x8, 0x16, "202d2235fd4c142b59aecef544cf1026eb1742ee6028"}, 0x20, 0x2) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r7 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r7, r6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x5) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r8}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={r8, 0x1}, 0x8) socket$vsock_dgram(0x28, 0x2, 0x0) 20:22:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r2, r1) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7, [@default, @null, @bcast, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) [ 420.974956] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 420.974956] program syz-executor.2 not setting count and/or reply_len properly [ 420.997381] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 420.997381] program syz-executor.1 not setting count and/or reply_len properly 20:22:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r2, r1) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7, [@default, @null, @bcast, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:22:59 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r1, r0) statx(r1, &(0x7f0000000000)='./bus\x00', 0x400, 0x800, &(0x7f0000000300)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r3 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r5 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r5, r4) setns(r4, 0x20000000) write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB='y'], 0xfe4e) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r6, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r3, 0x0, r6, 0x0, 0xffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 421.104645] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 421.104645] program syz-executor.1 not setting count and/or reply_len properly 20:23:00 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="00000029f80550bdf26b65a93c08da5b380000000000000000000000000000000000000000000004000000000000000000000000000010000000000000000000000000000000000000000000b6ff8c9f966ff1b8ef59168eaadb4a0a0000fdffffffffffffff00"/112], 0xb8}}, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000180)={0x7f, 0x8000, 0x2, 0x9, 0x2}) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) modify_ldt$write2(0x11, &(0x7f0000000280)={0x0, 0x20000000, 0x0, 0x1, 0x2, 0x1}, 0x10) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:23:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000280)={0x7, 0x79, 0x1}, 0x7) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'U+', 0xfffffffffffffffa}, 0x28, 0x1) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r4, r3) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000300)={@multicast1, @initdev, 0x0}, &(0x7f0000000340)=0xc) sendmsg$nl_route_sched(r4, &(0x7f0000001080)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000010}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=@newtfilter={0xb98, 0x2c, 0x0, 0x70bd28, 0x25dfdbfd, {0x0, r5, {0x0, 0xfffd}, {0x8, 0xe}, {0xa, 0xb}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_matchall={{0x10, 0x1, 'matchall\x00'}, {0xb8, 0x2, [@TCA_MATCHALL_ACT={0xb4, 0x2, @m_ipt={0xb0, 0x1, {{0x8, 0x1, 'ipt\x00'}, {0x18, 0x2, [@TCA_IPT_TABLE={0x14, 0x1, 'security\x00'}]}, {0x88, 0x6, "d1ff4b63a0bc083583fde4bdaf174d41fddbf69977e295c1185372cfc1b801b995bbce6746c3e102d757c9c089c870e1a72e136d0deed4ad5633490f4c2685e45d08f9b1e6e00378a23c45ea92eb3b514b2e2d3bcb0ffcb31bde6b20e1d191a35b6ac42157625a4c23e2c24e1f7cceb4f572eeb708cbcb78ac198040ab359bfb44874c"}}}}]}}, @TCA_CHAIN={0x8, 0xb, 0x1000}, @filter_kind_options=@f_basic={{0xc, 0x1, 'basic\x00'}, {0x2f4, 0x2, [@TCA_BASIC_ACT={0x80, 0x3, @m_sample={0x7c, 0x1, {{0xc, 0x1, 'sample\x00'}, {0xc, 0x2, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}]}, {0x5c, 0x6, "d009424e30a76b7556abeba02a68936235fe48b96616b60d3bda8ee245765bb4c076639dc703e3f09422bf88dac0a6f924e0c5a7a4ac6264787b220c947466dbb53733d713d21053b2a34d91d1886af3d8e4142ad88dcf89"}}}}, @TCA_BASIC_ACT={0x118, 0x3, @m_ife={0x114, 0x1, {{0x8, 0x1, 'ife\x00'}, {0x10, 0x2, [@TCA_IFE_METALST={0x4}, @TCA_IFE_TYPE={0x8, 0x5, 0x6}]}, {0xf4, 0x6, "1da3c53d686259fefb0e01ae3bafa7dcd449bad4180fc8eb5d76b42d3f156b5302b4dbf883bb86578feb2500c87cc848318c794020dbe05146a5b07d89d1ee92a2a0b3c9f110a6fb7c98bff89e3f90df531bcbc12b660b7516f342f7be1d0b524d87e4f29f7538bc6ad4462849ec1d024e4b3b9e34c8fecd59a0e520e2fed9fae619f794ed2935c8412e78ab75c31fc92faaf1d28a6ff9df2da57fbe80af778e2027db095b233d04ecb815f55b45cd871c527647d176383d7e2b495ced591eefbdac0ab612990f2c389cf1057cc5158ed6afe89c79c6303a9f5a893fbe86375e0bf6ef419326ec81fe33515df5aa"}}}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x1ffc0, 0xe}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x2}}, @TCA_BASIC_POLICE={0xc, 0x4, @TCA_POLICE_AVRATE={0x8, 0x4, 0x20}}, @TCA_BASIC_ACT={0x134, 0x3, @m_csum={0x130, 0xe, {{0xc, 0x1, 'csum\x00'}, {0x20, 0x2, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8001, 0x3, 0x4, 0x3f, 0x2}, 0x26}}}, {0xfc, 0x6, "756d99c92459a74f3e5fec980e53f2f2d881781c51596a23cdf5e16db2595b26875deb3bbf2de947129c683ab2a59ec6b4a19534db599a9c4c3ddc374f24a9d4302dc0e2c509bbe5bba1df64cb6de5194b172527730bf63f812c23fc33d690f934f6ad2244fedba34dbb38aced20c22179ea156c701d97415933141a0852e0e381b1d11db9774f42e0657427c5ea785f7649393fc7cd098de8213a6f55b83308f29d5fd289b17475d9650d5df90bd9f370b584ef80e647c43534c56d6aa54c9f9a495bde3344ff4dbead997db16cacd80d42beb0c6d435f06643e256b4683e445a789901cd802c27a30c2ec1b8312217b8a83e1ddf44"}}}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x8, 0xd}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0xbc, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xf, 0x8}}, @TCA_RSVP_ACT={0x5c, 0x6, @m_tunnel_key={0x58, 0xb, {{0x10, 0x1, 'tunnel_key\x00'}, {0x24, 0x2, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x8, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_NO_CSUM={0x8, 0xa, 0x1}]}, {0x1c, 0x6, "dcd5feec0b629a37456a50a154f2c79bfa0b8228b28752a1"}}}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x7ff, 0x6, 0x1}, {0x2, 0x3f, 0x6}, 0x6e31c906808bdf8e, 0x7, 0xff}}, @TCA_RSVP_SRC={0x14, 0x3, @mcast2}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xfffffe00, 0x7, 0xaed}, {0x4, 0x5, 0x1}, 0x5e, 0x6, 0x5}}]}}, @filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x6cc, 0x2, [@TCA_U32_ACT={0xa8, 0x7, @m_ife={0xa4, 0x1c, {{0x8, 0x1, 'ife\x00'}, {0x38, 0x2, [@TCA_IFE_DMAC={0xc, 0x3, @local}, @TCA_IFE_TYPE={0x8, 0x5, 0x4}, @TCA_IFE_TYPE={0x8, 0x5, 0x800}, @TCA_IFE_SMAC={0xc, 0x4, @remote}, @TCA_IFE_METALST={0x4}, @TCA_IFE_TYPE={0x8, 0x5, 0x6}]}, {0x5c, 0x6, "e460f57fa558b8245c8354232f65c57bea5afe2cda8a99db81ab34c757b890a12949ca49a48f856d6c8c6c48a575496b20be53d78a2b5cfa41cbf060d19beca1642157836bc44ab62f2bbdb2027488ece2718a7b53"}}}}, @TCA_U32_INDEV={0x14}, @TCA_U32_MARK={0x10, 0xa, {0x3, 0x82}}, @TCA_U32_SEL={0x5e4, 0x5, {0x3, 0x7f, 0x1, 0x2, 0x8000, 0x8001, 0x8, 0x4, [{0xbfa2, 0x9, 0x2, 0xffff0000}, {0xffff, 0x800, 0x955, 0x1}, {0x40, 0x0, 0x7, 0xffff182b}, {0x3, 0x80000000, 0x7, 0x8}, {0x7e, 0x3, 0x8, 0x3}, {0x5, 0x2, 0xf2000, 0x3}, {0x401, 0x7, 0xb0b, 0x80}, {0x40000, 0x4, 0x7f, 0x9b}, {0xbd2, 0xffffd762, 0x800, 0xfffffffd}, {0xca, 0xffffff7f, 0x62a, 0x40}, {0x0, 0x3ff, 0x0, 0x31}, {0x5, 0x2, 0x8000, 0x601f6d69}, {0xa9e5, 0x100, 0x6, 0x7}, {0x1, 0x7, 0x9, 0x46b}, {0x0, 0x1, 0x200, 0x6}, {0x3, 0x101, 0x0, 0x4}, {0x0, 0x62e}, {0x1ff, 0x4, 0x49d}, {0x2, 0x7b, 0x5, 0x80}, {0x30, 0x8, 0xffffffff, 0x3}, {0x9, 0x9, 0x4f6a, 0x80e5}, {0x4, 0x100, 0x2e, 0x4}, {0x7ff, 0x100, 0x7fff, 0x5}, {0x0, 0x80, 0x5, 0xfffffffb}, {0x9, 0x0, 0x38, 0x81}, {0x6, 0x0, 0x9, 0x80000001}, {0x1, 0x80000001, 0xffff9308, 0x7fffffff}, {0x5, 0xff, 0x9, 0x6}, {0x1f, 0x378, 0x295e, 0x1}, {0x10000, 0x4, 0x3d, 0x9}, {0x5, 0x9, 0x4, 0x3}, {0xfffffffb, 0x8b, 0x5, 0x101}, {0x2, 0x3, 0x1000, 0x6}, {0x1000, 0x0, 0xc73c, 0xfff}, {0x0, 0xffffffff, 0x8, 0x7}, {0x40, 0xfff, 0xf09, 0x9}, {0x3ff, 0x6, 0x8, 0x9}, {0x6, 0xffff29da, 0x7, 0x7fff}, {0xbd, 0xddaf, 0x7ff, 0xfffffff8}, {0x4, 0x4, 0x1, 0x90000000}, {0x80000000, 0xfffff800, 0x1, 0x3}, {0xfffffff7, 0x4, 0x70c, 0x1000}, {0x8, 0x1656, 0x1, 0x5}, {0x5, 0xffffffff, 0x1, 0x7fff}, {0x193, 0x20, 0x1, 0x1}, {0x8001, 0x3, 0x3f, 0xbac8}, {0x6, 0x6, 0x8, 0x3}, {0x3ff, 0x7, 0xffffffff, 0x7fff}, {0x2, 0x9, 0x4, 0x400}, {0x5a47, 0x5, 0xb239, 0xb5eb}, {0xffffffff, 0x1ff, 0x6, 0x5}, {0x0, 0x3f, 0x3, 0x5db}, {0x3b975d3a, 0xa20b, 0x4, 0x10000}, {0x9, 0x7fff, 0x7, 0x9}, {0x74, 0x9, 0x1, 0x83c}, {0x2, 0x2, 0x80000001, 0xffff}, {0x401, 0x8, 0x3, 0x5994}, {0x9, 0x7f, 0x8000, 0x3}, {0x8001, 0xffffffff, 0x9, 0x4}, {0x5, 0x7, 0x2, 0xfffffff9}, {0xbff8, 0xfff, 0x10000, 0x1}, {0x0, 0xfffff91c, 0x9, 0x3ff}, {0xffff, 0x1, 0x3, 0x81}, {0xcb4, 0x7b1, 0x0, 0x8000}, {0x81, 0xdc, 0x9dbd, 0x7}, {0x3f, 0x1, 0x3889, 0x7}, {0x8, 0x1000, 0x6, 0x1000}, {0x24, 0x7fffffff, 0x7, 0x80000000}, {0x2, 0x80, 0x3, 0x6}, {0xffffffc1, 0x7, 0xefd5, 0x7}, {0x2, 0x2, 0x9, 0x10001}, {0x2, 0x1ff, 0x8000, 0x2a0}, {0x4, 0x1, 0x4, 0x81}, {0x9, 0x2, 0x6, 0x29}, {0x4, 0x4, 0x8001, 0x6}, {0xffffffff, 0xffff, 0x7ff, 0x4}, {0x3, 0xbd87, 0x2, 0x3}, {0x4, 0x3, 0x6, 0x6}, {0xfffffe01, 0xd2b, 0x1ff, 0x1}, {0x7, 0x0, 0x3, 0x525}, {0x9, 0xffff, 0x6, 0x4}, {0x0, 0x0, 0x7f, 0x8}, {0x86e, 0x80000001, 0x9, 0x5}, {0x4, 0x8, 0xff, 0x1}, {0x5, 0x7, 0x7, 0x4}, {0x8, 0x0, 0x5, 0x3}, {0x100, 0x24, 0x5}, {0x1ff, 0x1000, 0x7, 0x2}, {0x2, 0xa1a, 0x0, 0x1ff}, {0x9, 0x400, 0xfff, 0x7fffffff}, {0x101, 0x80000001, 0x20, 0x7}, {0x7, 0x5b0d1be3, 0x6, 0x5}, {0x3f, 0x1f, 0x0, 0x7}]}}, @TCA_U32_MARK={0x10, 0xa, {0x1, 0x7}}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}]}, 0xb98}}, 0x4000000) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) [ 421.394345] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 421.394345] program syz-executor.1 not setting count and/or reply_len properly 20:23:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000280)={0x7, 0x79, 0x1}, 0x7) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'U+', 0xfffffffffffffffa}, 0x28, 0x1) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r4, r3) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000300)={@multicast1, @initdev, 0x0}, &(0x7f0000000340)=0xc) sendmsg$nl_route_sched(r4, &(0x7f0000001080)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000010}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=@newtfilter={0xb98, 0x2c, 0x0, 0x70bd28, 0x25dfdbfd, {0x0, r5, {0x0, 0xfffd}, {0x8, 0xe}, {0xa, 0xb}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_matchall={{0x10, 0x1, 'matchall\x00'}, {0xb8, 0x2, [@TCA_MATCHALL_ACT={0xb4, 0x2, @m_ipt={0xb0, 0x1, {{0x8, 0x1, 'ipt\x00'}, {0x18, 0x2, [@TCA_IPT_TABLE={0x14, 0x1, 'security\x00'}]}, {0x88, 0x6, "d1ff4b63a0bc083583fde4bdaf174d41fddbf69977e295c1185372cfc1b801b995bbce6746c3e102d757c9c089c870e1a72e136d0deed4ad5633490f4c2685e45d08f9b1e6e00378a23c45ea92eb3b514b2e2d3bcb0ffcb31bde6b20e1d191a35b6ac42157625a4c23e2c24e1f7cceb4f572eeb708cbcb78ac198040ab359bfb44874c"}}}}]}}, @TCA_CHAIN={0x8, 0xb, 0x1000}, @filter_kind_options=@f_basic={{0xc, 0x1, 'basic\x00'}, {0x2f4, 0x2, [@TCA_BASIC_ACT={0x80, 0x3, @m_sample={0x7c, 0x1, {{0xc, 0x1, 'sample\x00'}, {0xc, 0x2, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}]}, {0x5c, 0x6, "d009424e30a76b7556abeba02a68936235fe48b96616b60d3bda8ee245765bb4c076639dc703e3f09422bf88dac0a6f924e0c5a7a4ac6264787b220c947466dbb53733d713d21053b2a34d91d1886af3d8e4142ad88dcf89"}}}}, @TCA_BASIC_ACT={0x118, 0x3, @m_ife={0x114, 0x1, {{0x8, 0x1, 'ife\x00'}, {0x10, 0x2, [@TCA_IFE_METALST={0x4}, @TCA_IFE_TYPE={0x8, 0x5, 0x6}]}, {0xf4, 0x6, "1da3c53d686259fefb0e01ae3bafa7dcd449bad4180fc8eb5d76b42d3f156b5302b4dbf883bb86578feb2500c87cc848318c794020dbe05146a5b07d89d1ee92a2a0b3c9f110a6fb7c98bff89e3f90df531bcbc12b660b7516f342f7be1d0b524d87e4f29f7538bc6ad4462849ec1d024e4b3b9e34c8fecd59a0e520e2fed9fae619f794ed2935c8412e78ab75c31fc92faaf1d28a6ff9df2da57fbe80af778e2027db095b233d04ecb815f55b45cd871c527647d176383d7e2b495ced591eefbdac0ab612990f2c389cf1057cc5158ed6afe89c79c6303a9f5a893fbe86375e0bf6ef419326ec81fe33515df5aa"}}}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x1ffc0, 0xe}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x2}}, @TCA_BASIC_POLICE={0xc, 0x4, @TCA_POLICE_AVRATE={0x8, 0x4, 0x20}}, @TCA_BASIC_ACT={0x134, 0x3, @m_csum={0x130, 0xe, {{0xc, 0x1, 'csum\x00'}, {0x20, 0x2, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8001, 0x3, 0x4, 0x3f, 0x2}, 0x26}}}, {0xfc, 0x6, "756d99c92459a74f3e5fec980e53f2f2d881781c51596a23cdf5e16db2595b26875deb3bbf2de947129c683ab2a59ec6b4a19534db599a9c4c3ddc374f24a9d4302dc0e2c509bbe5bba1df64cb6de5194b172527730bf63f812c23fc33d690f934f6ad2244fedba34dbb38aced20c22179ea156c701d97415933141a0852e0e381b1d11db9774f42e0657427c5ea785f7649393fc7cd098de8213a6f55b83308f29d5fd289b17475d9650d5df90bd9f370b584ef80e647c43534c56d6aa54c9f9a495bde3344ff4dbead997db16cacd80d42beb0c6d435f06643e256b4683e445a789901cd802c27a30c2ec1b8312217b8a83e1ddf44"}}}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x8, 0xd}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0xbc, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xf, 0x8}}, @TCA_RSVP_ACT={0x5c, 0x6, @m_tunnel_key={0x58, 0xb, {{0x10, 0x1, 'tunnel_key\x00'}, {0x24, 0x2, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x8, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_NO_CSUM={0x8, 0xa, 0x1}]}, {0x1c, 0x6, "dcd5feec0b629a37456a50a154f2c79bfa0b8228b28752a1"}}}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x7ff, 0x6, 0x1}, {0x2, 0x3f, 0x6}, 0x6e31c906808bdf8e, 0x7, 0xff}}, @TCA_RSVP_SRC={0x14, 0x3, @mcast2}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xfffffe00, 0x7, 0xaed}, {0x4, 0x5, 0x1}, 0x5e, 0x6, 0x5}}]}}, @filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x6cc, 0x2, [@TCA_U32_ACT={0xa8, 0x7, @m_ife={0xa4, 0x1c, {{0x8, 0x1, 'ife\x00'}, {0x38, 0x2, [@TCA_IFE_DMAC={0xc, 0x3, @local}, @TCA_IFE_TYPE={0x8, 0x5, 0x4}, @TCA_IFE_TYPE={0x8, 0x5, 0x800}, @TCA_IFE_SMAC={0xc, 0x4, @remote}, @TCA_IFE_METALST={0x4}, @TCA_IFE_TYPE={0x8, 0x5, 0x6}]}, {0x5c, 0x6, "e460f57fa558b8245c8354232f65c57bea5afe2cda8a99db81ab34c757b890a12949ca49a48f856d6c8c6c48a575496b20be53d78a2b5cfa41cbf060d19beca1642157836bc44ab62f2bbdb2027488ece2718a7b53"}}}}, @TCA_U32_INDEV={0x14}, @TCA_U32_MARK={0x10, 0xa, {0x3, 0x82}}, @TCA_U32_SEL={0x5e4, 0x5, {0x3, 0x7f, 0x1, 0x2, 0x8000, 0x8001, 0x8, 0x4, [{0xbfa2, 0x9, 0x2, 0xffff0000}, {0xffff, 0x800, 0x955, 0x1}, {0x40, 0x0, 0x7, 0xffff182b}, {0x3, 0x80000000, 0x7, 0x8}, {0x7e, 0x3, 0x8, 0x3}, {0x5, 0x2, 0xf2000, 0x3}, {0x401, 0x7, 0xb0b, 0x80}, {0x40000, 0x4, 0x7f, 0x9b}, {0xbd2, 0xffffd762, 0x800, 0xfffffffd}, {0xca, 0xffffff7f, 0x62a, 0x40}, {0x0, 0x3ff, 0x0, 0x31}, {0x5, 0x2, 0x8000, 0x601f6d69}, {0xa9e5, 0x100, 0x6, 0x7}, {0x1, 0x7, 0x9, 0x46b}, {0x0, 0x1, 0x200, 0x6}, {0x3, 0x101, 0x0, 0x4}, {0x0, 0x62e}, {0x1ff, 0x4, 0x49d}, {0x2, 0x7b, 0x5, 0x80}, {0x30, 0x8, 0xffffffff, 0x3}, {0x9, 0x9, 0x4f6a, 0x80e5}, {0x4, 0x100, 0x2e, 0x4}, {0x7ff, 0x100, 0x7fff, 0x5}, {0x0, 0x80, 0x5, 0xfffffffb}, {0x9, 0x0, 0x38, 0x81}, {0x6, 0x0, 0x9, 0x80000001}, {0x1, 0x80000001, 0xffff9308, 0x7fffffff}, {0x5, 0xff, 0x9, 0x6}, {0x1f, 0x378, 0x295e, 0x1}, {0x10000, 0x4, 0x3d, 0x9}, {0x5, 0x9, 0x4, 0x3}, {0xfffffffb, 0x8b, 0x5, 0x101}, {0x2, 0x3, 0x1000, 0x6}, {0x1000, 0x0, 0xc73c, 0xfff}, {0x0, 0xffffffff, 0x8, 0x7}, {0x40, 0xfff, 0xf09, 0x9}, {0x3ff, 0x6, 0x8, 0x9}, {0x6, 0xffff29da, 0x7, 0x7fff}, {0xbd, 0xddaf, 0x7ff, 0xfffffff8}, {0x4, 0x4, 0x1, 0x90000000}, {0x80000000, 0xfffff800, 0x1, 0x3}, {0xfffffff7, 0x4, 0x70c, 0x1000}, {0x8, 0x1656, 0x1, 0x5}, {0x5, 0xffffffff, 0x1, 0x7fff}, {0x193, 0x20, 0x1, 0x1}, {0x8001, 0x3, 0x3f, 0xbac8}, {0x6, 0x6, 0x8, 0x3}, {0x3ff, 0x7, 0xffffffff, 0x7fff}, {0x2, 0x9, 0x4, 0x400}, {0x5a47, 0x5, 0xb239, 0xb5eb}, {0xffffffff, 0x1ff, 0x6, 0x5}, {0x0, 0x3f, 0x3, 0x5db}, {0x3b975d3a, 0xa20b, 0x4, 0x10000}, {0x9, 0x7fff, 0x7, 0x9}, {0x74, 0x9, 0x1, 0x83c}, {0x2, 0x2, 0x80000001, 0xffff}, {0x401, 0x8, 0x3, 0x5994}, {0x9, 0x7f, 0x8000, 0x3}, {0x8001, 0xffffffff, 0x9, 0x4}, {0x5, 0x7, 0x2, 0xfffffff9}, {0xbff8, 0xfff, 0x10000, 0x1}, {0x0, 0xfffff91c, 0x9, 0x3ff}, {0xffff, 0x1, 0x3, 0x81}, {0xcb4, 0x7b1, 0x0, 0x8000}, {0x81, 0xdc, 0x9dbd, 0x7}, {0x3f, 0x1, 0x3889, 0x7}, {0x8, 0x1000, 0x6, 0x1000}, {0x24, 0x7fffffff, 0x7, 0x80000000}, {0x2, 0x80, 0x3, 0x6}, {0xffffffc1, 0x7, 0xefd5, 0x7}, {0x2, 0x2, 0x9, 0x10001}, {0x2, 0x1ff, 0x8000, 0x2a0}, {0x4, 0x1, 0x4, 0x81}, {0x9, 0x2, 0x6, 0x29}, {0x4, 0x4, 0x8001, 0x6}, {0xffffffff, 0xffff, 0x7ff, 0x4}, {0x3, 0xbd87, 0x2, 0x3}, {0x4, 0x3, 0x6, 0x6}, {0xfffffe01, 0xd2b, 0x1ff, 0x1}, {0x7, 0x0, 0x3, 0x525}, {0x9, 0xffff, 0x6, 0x4}, {0x0, 0x0, 0x7f, 0x8}, {0x86e, 0x80000001, 0x9, 0x5}, {0x4, 0x8, 0xff, 0x1}, {0x5, 0x7, 0x7, 0x4}, {0x8, 0x0, 0x5, 0x3}, {0x100, 0x24, 0x5}, {0x1ff, 0x1000, 0x7, 0x2}, {0x2, 0xa1a, 0x0, 0x1ff}, {0x9, 0x400, 0xfff, 0x7fffffff}, {0x101, 0x80000001, 0x20, 0x7}, {0x7, 0x5b0d1be3, 0x6, 0x5}, {0x3f, 0x1f, 0x0, 0x7}]}}, @TCA_U32_MARK={0x10, 0xa, {0x1, 0x7}}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}]}, 0xb98}}, 0x4000000) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:23:00 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000003060501ff0000fffdffff2ef6ff04610c000100060000007d0a01010c0002"], 0x23}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 20:23:00 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) syz_mount_image$f2fs(&(0x7f00000000c0)='f2fs\x00', &(0x7f0000000140)='./file0\x00', 0xffff, 0x2, &(0x7f0000000280)=[{&(0x7f0000000300)="f9ea3729397b3119c96ca89c52d23dd795bf19802ed960bf7e2af7701608e7604eff72845265c69384350599a04e3b89d8ff384a8724ae7d2f3caac999f77fe051531cf60c8f06f96cd4c309907f498980a7cbfb83c32186d8d12bce2d4e383e6b135e09a122fac971a9a2b9990def9020c5c89823f434caeb0282021085cf845f1768ffd91116676217d97ace505fb59992188441e8dfc643652ca95c5b3bb8cf2ba900028ae0a595810fa4a219bd8cb8429c4c460fca1a4a7b2db8cea719d1b8ada5ab7889ae6e54feb7c4ad", 0xcd, 0x9}, {&(0x7f0000000400)="44c83de9886799fa45e1ce62380c8b6cf78e59e17a7ba0e6cc9ca57a131d0741369cff8cda19618deab327de2387cd22158302c1c461bee646ecb36396bb20a9657820f4740c842e7508eab19be9487b4d3de0592a", 0x55, 0x2}], 0x10010, &(0x7f0000000480)={[], [{@subj_role={'subj_role', 0x3d, '/dev/v4l-subdev#\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel='seclabel'}]}) r3 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x400, 0x100) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000040)={0x2, 0x0, {0x100, 0x7ff, 0x4, 0x9}}) syz_open_dev$mice(&(0x7f0000000500)='/dev/input/mice\x00', 0x0, 0x3870c0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000004c0)='./bus\x00', 0x4) 20:23:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000280)={0x7, 0x79, 0x1}, 0x7) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'U+', 0xfffffffffffffffa}, 0x28, 0x1) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r4, r3) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000300)={@multicast1, @initdev, 0x0}, &(0x7f0000000340)=0xc) sendmsg$nl_route_sched(r4, &(0x7f0000001080)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000010}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=@newtfilter={0xb98, 0x2c, 0x0, 0x70bd28, 0x25dfdbfd, {0x0, r5, {0x0, 0xfffd}, {0x8, 0xe}, {0xa, 0xb}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_matchall={{0x10, 0x1, 'matchall\x00'}, {0xb8, 0x2, [@TCA_MATCHALL_ACT={0xb4, 0x2, @m_ipt={0xb0, 0x1, {{0x8, 0x1, 'ipt\x00'}, {0x18, 0x2, [@TCA_IPT_TABLE={0x14, 0x1, 'security\x00'}]}, {0x88, 0x6, "d1ff4b63a0bc083583fde4bdaf174d41fddbf69977e295c1185372cfc1b801b995bbce6746c3e102d757c9c089c870e1a72e136d0deed4ad5633490f4c2685e45d08f9b1e6e00378a23c45ea92eb3b514b2e2d3bcb0ffcb31bde6b20e1d191a35b6ac42157625a4c23e2c24e1f7cceb4f572eeb708cbcb78ac198040ab359bfb44874c"}}}}]}}, @TCA_CHAIN={0x8, 0xb, 0x1000}, @filter_kind_options=@f_basic={{0xc, 0x1, 'basic\x00'}, {0x2f4, 0x2, [@TCA_BASIC_ACT={0x80, 0x3, @m_sample={0x7c, 0x1, {{0xc, 0x1, 'sample\x00'}, {0xc, 0x2, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}]}, {0x5c, 0x6, "d009424e30a76b7556abeba02a68936235fe48b96616b60d3bda8ee245765bb4c076639dc703e3f09422bf88dac0a6f924e0c5a7a4ac6264787b220c947466dbb53733d713d21053b2a34d91d1886af3d8e4142ad88dcf89"}}}}, @TCA_BASIC_ACT={0x118, 0x3, @m_ife={0x114, 0x1, {{0x8, 0x1, 'ife\x00'}, {0x10, 0x2, [@TCA_IFE_METALST={0x4}, @TCA_IFE_TYPE={0x8, 0x5, 0x6}]}, {0xf4, 0x6, "1da3c53d686259fefb0e01ae3bafa7dcd449bad4180fc8eb5d76b42d3f156b5302b4dbf883bb86578feb2500c87cc848318c794020dbe05146a5b07d89d1ee92a2a0b3c9f110a6fb7c98bff89e3f90df531bcbc12b660b7516f342f7be1d0b524d87e4f29f7538bc6ad4462849ec1d024e4b3b9e34c8fecd59a0e520e2fed9fae619f794ed2935c8412e78ab75c31fc92faaf1d28a6ff9df2da57fbe80af778e2027db095b233d04ecb815f55b45cd871c527647d176383d7e2b495ced591eefbdac0ab612990f2c389cf1057cc5158ed6afe89c79c6303a9f5a893fbe86375e0bf6ef419326ec81fe33515df5aa"}}}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x1ffc0, 0xe}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x2}}, @TCA_BASIC_POLICE={0xc, 0x4, @TCA_POLICE_AVRATE={0x8, 0x4, 0x20}}, @TCA_BASIC_ACT={0x134, 0x3, @m_csum={0x130, 0xe, {{0xc, 0x1, 'csum\x00'}, {0x20, 0x2, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8001, 0x3, 0x4, 0x3f, 0x2}, 0x26}}}, {0xfc, 0x6, "756d99c92459a74f3e5fec980e53f2f2d881781c51596a23cdf5e16db2595b26875deb3bbf2de947129c683ab2a59ec6b4a19534db599a9c4c3ddc374f24a9d4302dc0e2c509bbe5bba1df64cb6de5194b172527730bf63f812c23fc33d690f934f6ad2244fedba34dbb38aced20c22179ea156c701d97415933141a0852e0e381b1d11db9774f42e0657427c5ea785f7649393fc7cd098de8213a6f55b83308f29d5fd289b17475d9650d5df90bd9f370b584ef80e647c43534c56d6aa54c9f9a495bde3344ff4dbead997db16cacd80d42beb0c6d435f06643e256b4683e445a789901cd802c27a30c2ec1b8312217b8a83e1ddf44"}}}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x8, 0xd}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0xbc, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xf, 0x8}}, @TCA_RSVP_ACT={0x5c, 0x6, @m_tunnel_key={0x58, 0xb, {{0x10, 0x1, 'tunnel_key\x00'}, {0x24, 0x2, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x8, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_NO_CSUM={0x8, 0xa, 0x1}]}, {0x1c, 0x6, "dcd5feec0b629a37456a50a154f2c79bfa0b8228b28752a1"}}}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x7ff, 0x6, 0x1}, {0x2, 0x3f, 0x6}, 0x6e31c906808bdf8e, 0x7, 0xff}}, @TCA_RSVP_SRC={0x14, 0x3, @mcast2}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xfffffe00, 0x7, 0xaed}, {0x4, 0x5, 0x1}, 0x5e, 0x6, 0x5}}]}}, @filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x6cc, 0x2, [@TCA_U32_ACT={0xa8, 0x7, @m_ife={0xa4, 0x1c, {{0x8, 0x1, 'ife\x00'}, {0x38, 0x2, [@TCA_IFE_DMAC={0xc, 0x3, @local}, @TCA_IFE_TYPE={0x8, 0x5, 0x4}, @TCA_IFE_TYPE={0x8, 0x5, 0x800}, @TCA_IFE_SMAC={0xc, 0x4, @remote}, @TCA_IFE_METALST={0x4}, @TCA_IFE_TYPE={0x8, 0x5, 0x6}]}, {0x5c, 0x6, "e460f57fa558b8245c8354232f65c57bea5afe2cda8a99db81ab34c757b890a12949ca49a48f856d6c8c6c48a575496b20be53d78a2b5cfa41cbf060d19beca1642157836bc44ab62f2bbdb2027488ece2718a7b53"}}}}, @TCA_U32_INDEV={0x14}, @TCA_U32_MARK={0x10, 0xa, {0x3, 0x82}}, @TCA_U32_SEL={0x5e4, 0x5, {0x3, 0x7f, 0x1, 0x2, 0x8000, 0x8001, 0x8, 0x4, [{0xbfa2, 0x9, 0x2, 0xffff0000}, {0xffff, 0x800, 0x955, 0x1}, {0x40, 0x0, 0x7, 0xffff182b}, {0x3, 0x80000000, 0x7, 0x8}, {0x7e, 0x3, 0x8, 0x3}, {0x5, 0x2, 0xf2000, 0x3}, {0x401, 0x7, 0xb0b, 0x80}, {0x40000, 0x4, 0x7f, 0x9b}, {0xbd2, 0xffffd762, 0x800, 0xfffffffd}, {0xca, 0xffffff7f, 0x62a, 0x40}, {0x0, 0x3ff, 0x0, 0x31}, {0x5, 0x2, 0x8000, 0x601f6d69}, {0xa9e5, 0x100, 0x6, 0x7}, {0x1, 0x7, 0x9, 0x46b}, {0x0, 0x1, 0x200, 0x6}, {0x3, 0x101, 0x0, 0x4}, {0x0, 0x62e}, {0x1ff, 0x4, 0x49d}, {0x2, 0x7b, 0x5, 0x80}, {0x30, 0x8, 0xffffffff, 0x3}, {0x9, 0x9, 0x4f6a, 0x80e5}, {0x4, 0x100, 0x2e, 0x4}, {0x7ff, 0x100, 0x7fff, 0x5}, {0x0, 0x80, 0x5, 0xfffffffb}, {0x9, 0x0, 0x38, 0x81}, {0x6, 0x0, 0x9, 0x80000001}, {0x1, 0x80000001, 0xffff9308, 0x7fffffff}, {0x5, 0xff, 0x9, 0x6}, {0x1f, 0x378, 0x295e, 0x1}, {0x10000, 0x4, 0x3d, 0x9}, {0x5, 0x9, 0x4, 0x3}, {0xfffffffb, 0x8b, 0x5, 0x101}, {0x2, 0x3, 0x1000, 0x6}, {0x1000, 0x0, 0xc73c, 0xfff}, {0x0, 0xffffffff, 0x8, 0x7}, {0x40, 0xfff, 0xf09, 0x9}, {0x3ff, 0x6, 0x8, 0x9}, {0x6, 0xffff29da, 0x7, 0x7fff}, {0xbd, 0xddaf, 0x7ff, 0xfffffff8}, {0x4, 0x4, 0x1, 0x90000000}, {0x80000000, 0xfffff800, 0x1, 0x3}, {0xfffffff7, 0x4, 0x70c, 0x1000}, {0x8, 0x1656, 0x1, 0x5}, {0x5, 0xffffffff, 0x1, 0x7fff}, {0x193, 0x20, 0x1, 0x1}, {0x8001, 0x3, 0x3f, 0xbac8}, {0x6, 0x6, 0x8, 0x3}, {0x3ff, 0x7, 0xffffffff, 0x7fff}, {0x2, 0x9, 0x4, 0x400}, {0x5a47, 0x5, 0xb239, 0xb5eb}, {0xffffffff, 0x1ff, 0x6, 0x5}, {0x0, 0x3f, 0x3, 0x5db}, {0x3b975d3a, 0xa20b, 0x4, 0x10000}, {0x9, 0x7fff, 0x7, 0x9}, {0x74, 0x9, 0x1, 0x83c}, {0x2, 0x2, 0x80000001, 0xffff}, {0x401, 0x8, 0x3, 0x5994}, {0x9, 0x7f, 0x8000, 0x3}, {0x8001, 0xffffffff, 0x9, 0x4}, {0x5, 0x7, 0x2, 0xfffffff9}, {0xbff8, 0xfff, 0x10000, 0x1}, {0x0, 0xfffff91c, 0x9, 0x3ff}, {0xffff, 0x1, 0x3, 0x81}, {0xcb4, 0x7b1, 0x0, 0x8000}, {0x81, 0xdc, 0x9dbd, 0x7}, {0x3f, 0x1, 0x3889, 0x7}, {0x8, 0x1000, 0x6, 0x1000}, {0x24, 0x7fffffff, 0x7, 0x80000000}, {0x2, 0x80, 0x3, 0x6}, {0xffffffc1, 0x7, 0xefd5, 0x7}, {0x2, 0x2, 0x9, 0x10001}, {0x2, 0x1ff, 0x8000, 0x2a0}, {0x4, 0x1, 0x4, 0x81}, {0x9, 0x2, 0x6, 0x29}, {0x4, 0x4, 0x8001, 0x6}, {0xffffffff, 0xffff, 0x7ff, 0x4}, {0x3, 0xbd87, 0x2, 0x3}, {0x4, 0x3, 0x6, 0x6}, {0xfffffe01, 0xd2b, 0x1ff, 0x1}, {0x7, 0x0, 0x3, 0x525}, {0x9, 0xffff, 0x6, 0x4}, {0x0, 0x0, 0x7f, 0x8}, {0x86e, 0x80000001, 0x9, 0x5}, {0x4, 0x8, 0xff, 0x1}, {0x5, 0x7, 0x7, 0x4}, {0x8, 0x0, 0x5, 0x3}, {0x100, 0x24, 0x5}, {0x1ff, 0x1000, 0x7, 0x2}, {0x2, 0xa1a, 0x0, 0x1ff}, {0x9, 0x400, 0xfff, 0x7fffffff}, {0x101, 0x80000001, 0x20, 0x7}, {0x7, 0x5b0d1be3, 0x6, 0x5}, {0x3f, 0x1f, 0x0, 0x7}]}}, @TCA_U32_MARK={0x10, 0xa, {0x1, 0x7}}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}]}, 0xb98}}, 0x4000000) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:23:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x40000, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) r5 = dup2(r4, r3) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x81, 0x1, 0x0, r3}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r7 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r7, r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x5c, r9, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r10}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x38, 0x1, 'user_linkup_enabled\x00'}, {0xa}, {0x4}}, {0x8}}}]}}]}, 0x5c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r15, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r15, {0x0, 0xe}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r16 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r16, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r16, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r16, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r16, &(0x7f0000000780)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779a05c5c5a09000000ecf323c935ba26eab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc082b7bcdec844f667da0860700000000000000000000000000000000ebc53db0f533e8d15d34bf", 0x82, 0x0, 0x0, 0x0) recvmsg(r16, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) recvmmsg(r16, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r16, 0x0, 0x10, &(0x7f0000000400)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000500)=0xe8) r18 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r18, 0x5452, &(0x7f0000000140)=0x9) sendto$inet6(r18, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r18, 0x29, 0x23, &(0x7f00000018c0)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f00000019c0)=0xe8) r20 = socket$nl_route(0x10, 0x3, 0x0) r21 = socket$nl_route(0x10, 0x3, 0x0) r22 = socket$netlink(0x10, 0x3, 0x0) r23 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r24}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r21, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r24, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r20, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r24, {0x0, 0xe}, {0xffff, 0xffff}}}, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000001a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001a40)=0x14) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r26, 0x5452, &(0x7f0000000140)=0x9) sendto$inet6(r26, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r26, 0x29, 0x23, &(0x7f0000001a80)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000001b80)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001bc0)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000001cc0)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001d00)={'ip_vti0\x00', 0x0}) accept4$packet(0xffffffffffffffff, &(0x7f0000001d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001d80)=0x14, 0x80000) accept$packet(r4, &(0x7f0000001dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001e00)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000001f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001f40)=0x14) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001f80)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000002080)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000021c0)={@mcast1, 0x0}, &(0x7f0000002200)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000002300)={@empty, 0x0}, &(0x7f0000002340)=0x14) r36 = socket$nl_route(0x10, 0x3, 0x0) r37 = socket$nl_route(0x10, 0x3, 0x0) r38 = socket$netlink(0x10, 0x3, 0x0) r39 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r39, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r39, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r38, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r40}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r37, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r40, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r36, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r40, {0x0, 0xe}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r41 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r41, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) recvmmsg(r41, &(0x7f0000008200)=[{{&(0x7f0000002540)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000025c0)=""/213, 0xd5}, {&(0x7f00000026c0)=""/136, 0x88}, {&(0x7f0000002780)=""/53, 0x35}, {&(0x7f00000027c0)=""/101, 0x65}, {&(0x7f0000002840)=""/67, 0x43}], 0x5, &(0x7f0000002940)=""/206, 0xce}, 0x1}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000002a40)=""/158, 0x9e}, {&(0x7f0000002b00)=""/9, 0x9}, {&(0x7f0000002b40)=""/15, 0xf}, {&(0x7f0000002b80)=""/116, 0x74}, {&(0x7f0000002c00)=""/138, 0x8a}, {&(0x7f0000002cc0)=""/109, 0x6d}, {&(0x7f0000002d40)=""/254, 0xfe}, {&(0x7f0000002e40)=""/74, 0x4a}, {&(0x7f0000002ec0)=""/249, 0xf9}, {&(0x7f0000002fc0)=""/206, 0xce}], 0xa, &(0x7f0000003180)=""/131, 0x83}, 0x9}, {{&(0x7f0000003240)=@can={0x1d, 0x0}, 0x80, &(0x7f0000004400)=[{&(0x7f00000032c0)=""/63, 0x3f}, {&(0x7f0000003300)=""/43, 0x2b}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000004340)=""/141, 0x8d}], 0x4, &(0x7f0000004440)=""/4096, 0x1000}, 0xffff}, {{&(0x7f0000005440)=@nfc_llcp, 0x80, &(0x7f00000065c0)=[{&(0x7f00000054c0)=""/79, 0x4f}, {&(0x7f0000005540)=""/4096, 0x1000}, {&(0x7f0000006540)=""/49, 0x31}, {&(0x7f0000006580)=""/17, 0x11}], 0x4, &(0x7f0000006600)=""/4096, 0x1000}, 0x57cf}, {{0x0, 0x0, &(0x7f0000007980)=[{&(0x7f0000007600)=""/12, 0xc}, {&(0x7f0000007640)=""/95, 0x5f}, {&(0x7f00000076c0)=""/129, 0x81}, {&(0x7f0000007780)=""/252, 0xfc}, {&(0x7f0000007880)=""/200, 0xc8}], 0x5, &(0x7f0000007a00)=""/175, 0xaf}, 0x927}, {{0x0, 0x0, &(0x7f0000008080)=[{&(0x7f0000007ac0)=""/245, 0xf5}, {&(0x7f0000007bc0)=""/95, 0x5f}, {&(0x7f0000007c40)=""/128, 0x80}, {&(0x7f0000007cc0)}, {&(0x7f0000007d00)=""/122, 0x7a}, {&(0x7f0000007d80)=""/116, 0x74}, {&(0x7f0000007e00)=""/179, 0xb3}, {&(0x7f0000007ec0)=""/72, 0x48}, {&(0x7f0000007f40)=""/200, 0xc8}, {&(0x7f0000008040)=""/58, 0x3a}], 0xa, &(0x7f0000008140)=""/136, 0x88}}], 0x6, 0x2003, &(0x7f0000008380)) r43 = socket$nl_route(0x10, 0x3, 0x0) r44 = socket$nl_route(0x10, 0x3, 0x0) r45 = socket$netlink(0x10, 0x3, 0x0) r46 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r46, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r46, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r45, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r47}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r44, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r47, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r43, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r47, {0x0, 0xe}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000083c0)={'team0\x00', 0x0}) r49 = socket$nl_route(0x10, 0x3, 0x0) r50 = socket$nl_route(0x10, 0x3, 0x0) r51 = socket$netlink(0x10, 0x3, 0x0) r52 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r52, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r52, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r51, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r53}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r50, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r53, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r49, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r53, {0x0, 0xe}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r54 = socket$inet(0x2, 0x5, 0x0) bind$inet(r54, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r54, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r54, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r54, &(0x7f0000000780)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779a05c5c5a09000000ecf323c935ba26eab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc082b7bcdec844f667da0860700000000000000000000000000000000ebc53db0f533e8d15d34bf", 0x82, 0x0, 0x0, 0x0) recvmsg(r54, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) recvmmsg(r54, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) getsockopt$inet_pktinfo(r54, 0x0, 0x8, &(0x7f0000008400)={0x0, @remote, @remote}, &(0x7f0000008440)=0xc) r56 = socket$nl_route(0x10, 0x3, 0x0) r57 = socket$nl_route(0x10, 0x3, 0x0) r58 = socket$netlink(0x10, 0x3, 0x0) r59 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r59, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r59, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r58, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r60}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r57, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r60, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r56, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r60, {0x0, 0xe}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r61 = socket$nl_route(0x10, 0x3, 0x0) r62 = socket$nl_route(0x10, 0x3, 0x0) r63 = socket$netlink(0x10, 0x3, 0x0) r64 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r64, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r64, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r63, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r65}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r62, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r65, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r61, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r65, {0x0, 0xe}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000008540)={'tunl0\x00', r65}) r67 = socket$nl_route(0x10, 0x3, 0x0) r68 = socket$nl_route(0x10, 0x3, 0x0) r69 = socket$netlink(0x10, 0x3, 0x0) r70 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r70, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r70, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r69, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r71}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r68, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r71, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r67, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r71, {0x0, 0xe}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000008f40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000008f00)={&(0x7f0000008580)={0x94c, r9, 0x208, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r15}, {0xb4, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}]}}, {{0x8, 0x1, r24}, {0x274, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r25}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r27}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r28}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r29}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r30}}}]}}, {{0x8, 0x1, r31}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r32}}, {0x8}}}]}}, {{0x8, 0x1, r33}, {0x1cc, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r34}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r35}}}]}}, {{0x8, 0x1, r40}, {0x1f0, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r42}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r47}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r48}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r53}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r55}}}]}}, {{0x8, 0x1, r60}, {0x1e0, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xcbd7}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r66}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r71}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}]}, 0x94c}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:23:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) r3 = dup2(r2, r1) faccessat(r2, &(0x7f0000000180)='./file0\x00', 0x8, 0x800) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) lsetxattr$security_ima(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f0000000340)=@v2={0x3, 0x1, 0xc, 0x8, 0x16, "202d2235fd4c142b59aecef544cf1026eb1742ee6028"}, 0x20, 0x2) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r7 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r7, r6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x5) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r8}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={r8, 0x1}, 0x8) socket$vsock_dgram(0x28, 0x2, 0x0) [ 421.686532] f2fs_msg: 6 callbacks suppressed [ 421.686552] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 20:23:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) r3 = dup2(r2, r1) faccessat(r2, &(0x7f0000000180)='./file0\x00', 0x8, 0x800) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) lsetxattr$security_ima(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f0000000340)=@v2={0x3, 0x1, 0xc, 0x8, 0x16, "202d2235fd4c142b59aecef544cf1026eb1742ee6028"}, 0x20, 0x2) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r7 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r7, r6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x5) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r8}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={r8, 0x1}, 0x8) socket$vsock_dgram(0x28, 0x2, 0x0) 20:23:00 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7, 0x0) open(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x0, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r3, r4, &(0x7f0000000240)=0x202, 0x4000000000dc) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r5, 0xc05, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3500000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000228bd7000ffdbdf2503001d0008000100000000000800010000000000000000000000000adc000000"], 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) [ 421.758563] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 421.817458] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 421.867756] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 421.932872] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 421.987985] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 422.029302] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 422.058801] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 20:23:01 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) syz_mount_image$f2fs(&(0x7f00000000c0)='f2fs\x00', &(0x7f0000000140)='./file0\x00', 0xffff, 0x2, &(0x7f0000000280)=[{&(0x7f0000000300)="f9ea3729397b3119c96ca89c52d23dd795bf19802ed960bf7e2af7701608e7604eff72845265c69384350599a04e3b89d8ff384a8724ae7d2f3caac999f77fe051531cf60c8f06f96cd4c309907f498980a7cbfb83c32186d8d12bce2d4e383e6b135e09a122fac971a9a2b9990def9020c5c89823f434caeb0282021085cf845f1768ffd91116676217d97ace505fb59992188441e8dfc643652ca95c5b3bb8cf2ba900028ae0a595810fa4a219bd8cb8429c4c460fca1a4a7b2db8cea719d1b8ada5ab7889ae6e54feb7c4ad", 0xcd, 0x9}, {&(0x7f0000000400)="44c83de9886799fa45e1ce62380c8b6cf78e59e17a7ba0e6cc9ca57a131d0741369cff8cda19618deab327de2387cd22158302c1c461bee646ecb36396bb20a9657820f4740c842e7508eab19be9487b4d3de0592a", 0x55, 0x2}], 0x10010, &(0x7f0000000480)={[], [{@subj_role={'subj_role', 0x3d, '/dev/v4l-subdev#\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel='seclabel'}]}) r3 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x400, 0x100) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000040)={0x2, 0x0, {0x100, 0x7ff, 0x4, 0x9}}) syz_open_dev$mice(&(0x7f0000000500)='/dev/input/mice\x00', 0x0, 0x3870c0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000004c0)='./bus\x00', 0x4) 20:23:01 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000003060501ff0000fffdffff2ef6ff04610c000100060000007d0a01010c0002"], 0x23}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 20:23:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40800, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000180)=0x7fff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x8) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) [ 422.551926] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 422.582952] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 20:23:01 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20\x00', 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000400)={0x7ff, 0x0, 0x9c, 0xfc}, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x60, r6, 0x31, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4008050) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5010000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r6, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x4004080) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="e5f4a40376b89cda9715f47a841d72173ec947a35237010001004e7c012e1b79e87e0658fab8a513050a9c15b8318bdfa0d5f91259081fa023c737ebe84483c3a7ec1cd075d9824bb9018f9d48b9dbe21cb879fcad9c00654a79e44233e50e5e0a9fb44d6ad13ac35a365ce8c4a0094bdb1a09f6f4568b70fc496225ebb81ab96635f636523bd5e5dfae00807b4a1b246ae04338a2862dc3776266a6d447ea215231bd92957470a713a68ba1a2"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="7f"}) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x3}}, 0xb8}}, 0x0) 20:23:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40800, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000180)=0x7fff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x8) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:23:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40800, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000180)=0x7fff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x8) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) [ 422.815598] IPVS: Error connecting to the multicast addr 20:23:01 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20\x00', 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000400)={0x7ff, 0x0, 0x9c, 0xfc}, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x60, r6, 0x31, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4008050) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5010000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r6, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x4004080) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="e5f4a40376b89cda9715f47a841d72173ec947a35237010001004e7c012e1b79e87e0658fab8a513050a9c15b8318bdfa0d5f91259081fa023c737ebe84483c3a7ec1cd075d9824bb9018f9d48b9dbe21cb879fcad9c00654a79e44233e50e5e0a9fb44d6ad13ac35a365ce8c4a0094bdb1a09f6f4568b70fc496225ebb81ab96635f636523bd5e5dfae00807b4a1b246ae04338a2862dc3776266a6d447ea215231bd92957470a713a68ba1a2"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="7f"}) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x3}}, 0xb8}}, 0x0) 20:23:01 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) getdents(r1, &(0x7f00000000c0)=""/172, 0xac) bind$inet6(r2, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r3 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="dd", 0x1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0x0, 0x0, 0xfffffffffffffdcc}}], 0x400000000000490, 0x6, 0x0) [ 423.014865] IPVS: Error connecting to the multicast addr 20:23:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000001c0)={0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}]}) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r4 = dup3(r2, r3, 0x80000) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'U+', 0xc556}, 0x28, 0x6d119be6c4700598) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:23:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:23:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000180)=0x9) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:23:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:23:01 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) syz_mount_image$f2fs(&(0x7f00000000c0)='f2fs\x00', &(0x7f0000000140)='./file0\x00', 0xffff, 0x2, &(0x7f0000000280)=[{&(0x7f0000000300)="f9ea3729397b3119c96ca89c52d23dd795bf19802ed960bf7e2af7701608e7604eff72845265c69384350599a04e3b89d8ff384a8724ae7d2f3caac999f77fe051531cf60c8f06f96cd4c309907f498980a7cbfb83c32186d8d12bce2d4e383e6b135e09a122fac971a9a2b9990def9020c5c89823f434caeb0282021085cf845f1768ffd91116676217d97ace505fb59992188441e8dfc643652ca95c5b3bb8cf2ba900028ae0a595810fa4a219bd8cb8429c4c460fca1a4a7b2db8cea719d1b8ada5ab7889ae6e54feb7c4ad", 0xcd, 0x9}, {&(0x7f0000000400)="44c83de9886799fa45e1ce62380c8b6cf78e59e17a7ba0e6cc9ca57a131d0741369cff8cda19618deab327de2387cd22158302c1c461bee646ecb36396bb20a9657820f4740c842e7508eab19be9487b4d3de0592a", 0x55, 0x2}], 0x10010, &(0x7f0000000480)={[], [{@subj_role={'subj_role', 0x3d, '/dev/v4l-subdev#\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel='seclabel'}]}) r3 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x400, 0x100) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000040)={0x2, 0x0, {0x100, 0x7ff, 0x4, 0x9}}) syz_open_dev$mice(&(0x7f0000000500)='/dev/input/mice\x00', 0x0, 0x3870c0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000004c0)='./bus\x00', 0x4) 20:23:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000001c0)={0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}]}) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r4 = dup3(r2, r3, 0x80000) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'U+', 0xc556}, 0x28, 0x6d119be6c4700598) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:23:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000003060501ff0000fffdffff2ef6ff04610c000100060000007d0a01010c0002"], 0x23}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 20:23:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:23:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000400)='tasks\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x16, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x0, 0x2) write$P9_RVERSION(r2, &(0x7f0000000200)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r5, 0x80605414, &(0x7f0000000480)=""/24) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) ioctl$FICLONE(r4, 0x40049409, r6) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r8}}, 0x18) r9 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r9, r7) ioctl$VFIO_GET_API_VERSION(r9, 0x3b64) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000180)) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:23:02 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000003060501ff0000fffdffff2ef6ff04610c000100060000007d0a01010c0002"], 0x23}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 20:23:02 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000780)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779a05c5c5a09000000ecf323c935ba26eab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc082b7bcdec844f667da0860700000000000000000000000000000000ebc53db0f533e8d15d34bf", 0x82, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x8, 0x4) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:23:02 executing program 5: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="544c67b2eff373eed02868fafb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x405) socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$read(0x0, &(0x7f00000000c0)=""/196, 0xc4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x875c, 0x0, 0x4c51a1c6}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) add_key$user(0x0, &(0x7f0000000080)={'syz'}, &(0x7f0000000140)="f7f1", 0x2, 0xfffffffffffffffd) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000001c0)) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) 20:23:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000001c0)={0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}]}) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r4 = dup3(r2, r3, 0x80000) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'U+', 0xc556}, 0x28, 0x6d119be6c4700598) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:23:02 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000003060501ff0000fffdffff2ef6ff04610c000100060000007d0a01010c0002"], 0x23}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 20:23:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x4000) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000180)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=r4, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:23:02 executing program 4: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000003060501ff0000fffdffff2ef6ff04610c000100060000007d0a01010c0002"], 0x23}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) [ 423.780962] sctp: [Deprecated]: syz-executor.0 (pid 16840) Use of int in maxseg socket option. [ 423.780962] Use struct sctp_assoc_value instead 20:23:02 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0xfe4e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) syz_mount_image$f2fs(&(0x7f00000000c0)='f2fs\x00', &(0x7f0000000140)='./file0\x00', 0xffff, 0x2, &(0x7f0000000280)=[{&(0x7f0000000300)="f9ea3729397b3119c96ca89c52d23dd795bf19802ed960bf7e2af7701608e7604eff72845265c69384350599a04e3b89d8ff384a8724ae7d2f3caac999f77fe051531cf60c8f06f96cd4c309907f498980a7cbfb83c32186d8d12bce2d4e383e6b135e09a122fac971a9a2b9990def9020c5c89823f434caeb0282021085cf845f1768ffd91116676217d97ace505fb59992188441e8dfc643652ca95c5b3bb8cf2ba900028ae0a595810fa4a219bd8cb8429c4c460fca1a4a7b2db8cea719d1b8ada5ab7889ae6e54feb7c4ad", 0xcd, 0x9}, {&(0x7f0000000400)="44c83de9886799fa45e1ce62380c8b6cf78e59e17a7ba0e6cc9ca57a131d0741369cff8cda19618deab327de2387cd22158302c1c461bee646ecb36396bb20a9657820f4740c842e7508eab19be9487b4d3de0592a", 0x55, 0x2}], 0x10010, &(0x7f0000000480)={[], [{@subj_role={'subj_role', 0x3d, '/dev/v4l-subdev#\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel='seclabel'}]}) r3 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x400, 0x100) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000040)={0x2, 0x0, {0x100, 0x7ff, 0x4, 0x9}}) syz_open_dev$mice(&(0x7f0000000500)='/dev/input/mice\x00', 0x0, 0x3870c0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 20:23:02 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000780)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779a05c5c5a09000000ecf323c935ba26eab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc082b7bcdec844f667da0860700000000000000000000000000000000ebc53db0f533e8d15d34bf", 0x82, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x8, 0x4) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) 20:23:02 executing program 4: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000003060501ff0000fffdffff2ef6ff04610c000100060000007d0a01010c0002"], 0x23}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 20:23:02 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r1, r0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000180)=0x20) r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x81, 0x80002) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000140)=0x9) sendto$inet6(r4, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000540)={@loopback, 0x0}, &(0x7f00000005c0)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', r5}) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) writev(r8, &(0x7f0000000580)=[{&(0x7f0000001480)="7a2f04655b16b9c38ba0c94aef743e56", 0x10}], 0x1) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r9, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r8, &(0x7f0000000340), 0xfdef}]) r10 = dup(0xffffffffffffffff) io_cancel(r9, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x9, r10, &(0x7f00000002c0)="d299544c3d0414abc8ddc05fca876d2e9b292ce92d5b58c58351da8862e8d7bf2c495ac5e483f919f641496d807a5694a59004bae2d51cbc8620efbaa6c5a8d1653a1cdd85415a6cb8b33867a6ff64b9fd104c2cd1bdb370e63d8cc52296aabf3b1564e8ac93ea79b85daefdeea49801654ff34241fe84fdca5d6ef397b51ac30ea80d50485e04479ff03a786a6522cfd3d82377611f86f1474007b92f97704dbcea2645d3174f464e80d81b51e3e9b7ed98611af0aaebf9fc98e463c0205bc276711237de4b84e61267f3104477bbf3b87a1d103a8390bcd65b4699be0eed294dd4ce8a03b4f857", 0xe8, 0x2, 0x0, 0x1, r0}, &(0x7f0000000240)) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) [ 424.176057] sg_write: 3 callbacks suppressed [ 424.176083] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 424.176083] program syz-executor.2 not setting count and/or reply_len properly 20:23:02 executing program 4: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000003060501ff0000fffdffff2ef6ff04610c000100060000007d0a01010c0002"], 0x23}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 20:23:03 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000003060501ff0000fffdffff2ef6ff04610c000100060000007d0a01010c0002"], 0x23}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 20:23:03 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r1, r0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000180)=0x20) r2 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x81, 0x80002) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000140)=0x9) sendto$inet6(r4, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000540)={@loopback, 0x0}, &(0x7f00000005c0)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', r5}) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x143300, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) writev(r8, &(0x7f0000000580)=[{&(0x7f0000001480)="7a2f04655b16b9c38ba0c94aef743e56", 0x10}], 0x1) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r9, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r8, &(0x7f0000000340), 0xfdef}]) r10 = dup(0xffffffffffffffff) io_cancel(r9, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x9, r10, &(0x7f00000002c0)="d299544c3d0414abc8ddc05fca876d2e9b292ce92d5b58c58351da8862e8d7bf2c495ac5e483f919f641496d807a5694a59004bae2d51cbc8620efbaa6c5a8d1653a1cdd85415a6cb8b33867a6ff64b9fd104c2cd1bdb370e63d8cc52296aabf3b1564e8ac93ea79b85daefdeea49801654ff34241fe84fdca5d6ef397b51ac30ea80d50485e04479ff03a786a6522cfd3d82377611f86f1474007b92f97704dbcea2645d3174f464e80d81b51e3e9b7ed98611af0aaebf9fc98e463c0205bc276711237de4b84e61267f3104477bbf3b87a1d103a8390bcd65b4699be0eed294dd4ce8a03b4f857", 0xe8, 0x2, 0x0, 0x1, r0}, &(0x7f0000000240)) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='irlan0\x00'}) [ 424.485384] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 424.485384] program syz-executor.2 not setting count and/or reply_len properly [ 424.539752] ------------[ cut here ]------------ [ 424.544841] kernel BUG at ./include/linux/scatterlist.h:124! [ 424.564052] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 424.569455] Modules linked in: [ 424.572660] CPU: 1 PID: 16872 Comm: syz-executor.2 Not tainted 4.14.146 #0 [ 424.579809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 424.589169] task: ffff88805a96e580 task.stack: ffff88805b850000 [ 424.595240] RIP: 0010:gcmaes_decrypt.constprop.0+0x910/0xd20 [ 424.601033] RSP: 0018:ffff88805b8577a8 EFLAGS: 00010212 [ 424.606391] RAX: 0000000000040000 RBX: ffff88808b80ecc8 RCX: ffffc90013728000 [ 424.613843] RDX: 0000000000000a7b RSI: ffffffff812ecd40 RDI: ffff88808b80e964 [ 424.621200] RBP: ffff88805b857880 R08: ffff888092dbfb60 R09: ffffed100b70af18 [ 424.628582] R10: ffffed100b70af17 R11: ffff88805b8578bb R12: ffffea00026e8582 [ 424.636029] R13: ffff88808b80ecfc R14: 0000000000000010 R15: ffff88808407cd00 [ 424.643385] FS: 00007f256ef8c700(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 424.651602] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 424.657647] CR2: 00007f256ef2b000 CR3: 0000000098e7a000 CR4: 00000000001406e0 [ 424.665178] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 424.673255] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 424.680545] Call Trace: [ 424.683140] ? aesni_gcm_enc_avx2+0x140/0x140 [ 424.688785] generic_gcmaes_decrypt+0xf4/0x130 [ 424.693545] ? helper_rfc4106_decrypt+0x320/0x320 [ 424.698383] gcmaes_wrapper_decrypt+0x162/0x200 [ 424.703045] aead_recvmsg+0xf47/0x1d70 [ 424.706924] ? __kernel_text_address+0xd/0x40 [ 424.711448] ? aead_release+0x50/0x50 [ 424.715278] ? selinux_socket_recvmsg+0x36/0x40 [ 424.719956] ? security_socket_recvmsg+0x91/0xc0 [ 424.724715] ? aead_release+0x50/0x50 [ 424.728518] sock_recvmsg+0xc6/0x110 [ 424.732227] sock_read_iter+0x22f/0x340 [ 424.736200] ? sock_recvmsg+0x110/0x110 [ 424.740261] ? selinux_file_permission+0x85/0x480 [ 424.745101] ? rw_verify_area+0xea/0x2b0 [ 424.749158] aio_read+0x221/0x300 [ 424.752797] ? aio_write+0x4f0/0x4f0 [ 424.756597] ? find_held_lock+0x35/0x130 [ 424.760693] ? __might_fault+0x110/0x1d0 [ 424.764893] ? __might_fault+0x110/0x1d0 [ 424.768954] ? lock_downgrade+0x6e0/0x6e0 [ 424.773108] do_io_submit+0x1027/0x13f0 [ 424.777089] ? free_ioctx_users+0x3e0/0x3e0 [ 424.781427] ? kasan_check_read+0x11/0x20 [ 424.785567] ? _copy_to_user+0x87/0xd0 [ 424.789463] ? put_timespec64+0xb4/0x100 [ 424.793524] ? nsecs_to_jiffies+0x30/0x30 [ 424.797680] ? SyS_clock_gettime+0xf8/0x180 [ 424.802007] ? SyS_io_destroy+0x310/0x310 [ 424.806252] SyS_io_submit+0x28/0x30 [ 424.809965] ? SyS_io_submit+0x28/0x30 [ 424.813943] do_syscall_64+0x1e8/0x640 [ 424.817834] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 424.822685] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 424.827878] RIP: 0033:0x459a29 [ 424.831060] RSP: 002b:00007f256ef8bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 424.838773] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a29 [ 424.846065] RDX: 0000000020001440 RSI: 0000000000000001 RDI: 00007f256ef2b000 [ 424.853340] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 424.860613] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f256ef8c6d4 [ 424.867929] R13: 00000000004c0e25 R14: 00000000004d3ff0 R15: 00000000ffffffff [ 424.875305] Code: 0f 0b e8 d4 15 2e 00 0f 0b e8 cd 15 2e 00 0f 0b e8 c6 15 2e 00 0f 0b e8 bf 15 2e 00 e8 36 75 d1 ff e9 63 ff ff ff e8 b0 15 2e 00 <0f> 0b e8 a9 15 2e 00 0f 0b 4c 89 85 58 ff ff ff e8 9b 15 2e 00 [ 424.894604] RIP: gcmaes_decrypt.constprop.0+0x910/0xd20 RSP: ffff88805b8577a8 [ 424.913218] ---[ end trace 8ede078720ce92f7 ]--- [ 424.918082] Kernel panic - not syncing: Fatal exception [ 424.925191] Kernel Offset: disabled [ 424.928938] Rebooting in 86400 seconds..