s an invalid length. [ 1047.630680] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 07:03:31 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x0, 0x1, 0x98, 0x5}]}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 1047.771244] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1047.778641] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 07:03:31 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:03:31 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x7400) 07:03:31 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x0, 0x1, 0x98, 0x5}]}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:31 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:31 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x80000, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000005c0)=ANY=[@ANYBLOB="040000004f000000792fc288f37cfd62343d1d66aa42a107b5777e51bd18818a62ad9ee1ebf705d96ae48b1eb66a4cf6313814e0a34ff85190c2c05fd29c8267def4c7465d14b0a50000000000000000000000ab52206e563242cdaca1e3f10ee2857bbbf10a92ead1f3d44887255cc1f0d61651f128d9d348851dfaa2ccadb347921f248c8b91b1cc6d971a"]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) getpid() r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f00000014c0)=0x2) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000280)) r4 = accept$nfc_llcp(r0, &(0x7f0000000400), &(0x7f0000000480)=0xaae4126ff2dc018d) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000001480)={0x1, 'veth1_to_batadv\x00', {}, 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') ioctl$BTRFS_IOC_SNAP_CREATE(r5, 0x50009401, &(0x7f0000001500)={{}, "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"}) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, &(0x7f0000000100)={0x7, "972e820564ee690db77e41a0a58deaf09db71f3803798311f5782acf7e5032e65af82915d3aaeaa1b5d5b2311bd2ddd8395849dcbb36b276d2b7a1dc510a8fb2", {0x0, 0x6}}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x400000, 0x0, 0x0, 0x0, 0x80000000000800, 0x10000020000000fb], 0x100000, 0x402}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1047.933319] sd 0:0:1:0: [sg0] tag#4750 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1047.942276] sd 0:0:1:0: [sg0] tag#4750 CDB: opcode=0xfa (vendor) [ 1047.948469] sd 0:0:1:0: [sg0] tag#4750 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1047.957407] sd 0:0:1:0: [sg0] tag#4750 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1047.966309] sd 0:0:1:0: [sg0] tag#4750 CDB[20]: 65 [ 1048.021235] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 07:03:31 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x0, 0x1, 0x98, 0x5}]}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 1048.068631] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1048.134672] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1048.252789] device veth25 entered promiscuous mode [ 1048.314566] IPv6: ADDRCONF(NETDEV_UP): veth25: link is not ready 07:03:31 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1048.362494] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1048.373801] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 07:03:31 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x7727) 07:03:31 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x7a00) 07:03:32 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x0, 0x1, 0x98, 0x5}]}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4) syz_mount_image$nilfs2(&(0x7f0000000000)='nilfs2\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000180)=[{&(0x7f0000000140), 0x0, 0x100000}], 0x1004000, &(0x7f0000000080)={[{@barrier='barrier'}, {@order_relaxed='order=relaxed'}, {@norecovery='norecovery'}, {@nodiscard='nodiscard'}, {@norecovery='norecovery'}, {@snapshot={'snapshot'}}, {@nodiscard='nodiscard'}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/dsp\x00'}}, {@euid_gt={'euid>'}}, {@obj_user={'obj_user', 0x3d, ':+-]+.'}}]}) 07:03:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1048.640683] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1048.648087] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 07:03:32 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:32 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x0, 0x1, 0x98, 0x5}]}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 1048.724275] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1048.775494] sd 0:0:1:0: [sg0] tag#4756 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1048.784453] sd 0:0:1:0: [sg0] tag#4756 CDB: opcode=0xfa (vendor) [ 1048.790680] sd 0:0:1:0: [sg0] tag#4756 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1048.799599] sd 0:0:1:0: [sg0] tag#4756 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1048.808485] sd 0:0:1:0: [sg0] tag#4756 CDB[20]: 65 07:03:32 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x8100) [ 1048.829555] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1048.850999] NILFS (loop3): couldn't find nilfs on the device 07:03:32 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x0, 0x1, 0x98, 0x5}]}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:32 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:32 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x0, 0x1, 0x98, 0x5}]}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1048.973368] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 07:03:32 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x1, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="10010000", @ANYRES16=r1, @ANYBLOB="20002bbd7000fddbdf250e0000000c0009800800020002000000dc0006800800010001000000ca00030049b1c4756eec4c5423f3944aa6b0f35238dd2cf8317ac559d378230865d818a00eae01baef479de9b5a94b558eafc2e1ede036d46ea145e0f45664206cc47969aa8009605164d57d5e24bac016482ea2fd686c20f205dc43ed8e98800a23c4cda51852830c277a505ecc014adc336bfd437868e9d2193009ed13c2ce43306353a6d558d35b42218f4f34053be8fa2c549de4ed5093c60269c232bb35831fbeca4a63ef2f12763fb1e998125f7ab4d31a9ce8edcc0b4f19b0e160f619fb2f13f7973e131d2c4f0000040002001400028008000200010000000800020007000000"], 0x110}, 0x1, 0x0, 0x0, 0x40040}, 0x4000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'macvlan1\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r3) dup2(r3, 0xffffffffffffffff) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x502c0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) connect$tipc(r6, &(0x7f0000000480)=@nameseq={0x1e, 0x1, 0x2, {0x43}}, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000020071400082abd7000fcdbdf25050054000000000008004401", @ANYRES32=r6, @ANYBLOB="0900020073797a3100209aa684f3f70b1c000000"], 0x2c}}, 0x40000) r7 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r8 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r7) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r8) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000000c0)={r8, 0xe9, 0xe3}, &(0x7f0000000500)={'enc=', 'raw', ' hash=', {'sm3\x00'}}, &(0x7f0000000580)="1ee4a1b9650d14d2288660268e716116ace9d66144d07fcfda68e7cf58c0e062e071e2dcf19f42b94ae112fdc58d1fa120bae553839d45dd592d1b2c4412e3c63af3296c36426b4ffa24478a23ff19c135d4b53bfedc4623a6c3625bf1734dababe6bce23479ca936fc925000228339cf9bee1c785e81408814abbf7013a7a728920f48b20de5c3ea7acf417f4c10a3f118208a673a28910e9b1c012c7690b318d2600afdce84ff4aaf4eddba2c19aefd6ffbd2cc944cebc6aa503854030a501ce2d9917a4f16caeea2b9c475418dd5bfeb5295d7360c1740cb2c91081a110da74081fd1c3ea35f5ae", &(0x7f0000000680)=""/227) [ 1049.018412] sd 0:0:1:0: [sg0] tag#4793 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1049.027306] sd 0:0:1:0: [sg0] tag#4793 CDB: opcode=0xfa (vendor) [ 1049.033527] sd 0:0:1:0: [sg0] tag#4793 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1049.042480] sd 0:0:1:0: [sg0] tag#4793 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1049.051381] sd 0:0:1:0: [sg0] tag#4793 CDB[20]: 65 07:03:32 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:32 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xc000) 07:03:32 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x0, 0x1, 0x98, 0x5}]}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:32 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x0, 0x1, 0x98, 0x5}]}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 1049.309119] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 07:03:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1049.388987] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1049.399131] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1049.492903] sd 0:0:1:0: [sg0] tag#4756 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1049.501836] sd 0:0:1:0: [sg0] tag#4756 CDB: opcode=0xfa (vendor) [ 1049.508034] sd 0:0:1:0: [sg0] tag#4756 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1049.516961] sd 0:0:1:0: [sg0] tag#4756 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1049.525860] sd 0:0:1:0: [sg0] tag#4756 CDB[20]: 65 07:03:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1049.676151] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 07:03:33 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x0, 0x1, 0x98, 0x5}]}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:33 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1049.773687] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1049.782187] sd 0:0:1:0: [sg0] tag#4756 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1049.791843] sd 0:0:1:0: [sg0] tag#4756 CDB: opcode=0xfa (vendor) [ 1049.798024] sd 0:0:1:0: [sg0] tag#4756 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1049.807072] sd 0:0:1:0: [sg0] tag#4756 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1049.815987] sd 0:0:1:0: [sg0] tag#4756 CDB[20]: 65 07:03:33 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xc00e) [ 1049.821028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1049.833132] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 07:03:33 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000001680)={'filter\x00', 0x7, 0x4, 0x4c8, 0xe8, 0x0, 0xe8, 0x3e0, 0x3e0, 0x3e0, 0x4, &(0x7f0000000040), {[{{@arp={@loopback, @private=0xa010101, 0xff, 0xff, 0x9, 0x6, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x8, 0x6, 0x1, 0xc854, 0x2, 0x6, 'tunl0\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x691c1ceef33c4cfd}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xf, 0xffffffff}}}, {{@arp={@broadcast, @empty, 0x0, 0xffffffff, 0x3, 0x1, {@empty, {[0x0, 0xff, 0x945c1da232f61310, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x800, 0x1, 0x5a9, 0x8, 0x100, 0x80, 'team_slave_0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x0, 0x104}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x9, 'system_u:object_r:system_dbusd_var_lib_t:s0\x00'}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x518) getdents(r0, &(0x7f0000000680)=""/4094, 0xffe) [ 1049.894686] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 07:03:33 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xf000) 07:03:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:03:33 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:33 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x0, 0x1, 0x98, 0x5}]}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:33 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x0, 0x1, 0x98, 0x5}]}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 1050.019829] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1050.028100] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1050.028572] sd 0:0:1:0: [sg0] tag#4756 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1050.045184] sd 0:0:1:0: [sg0] tag#4756 CDB: opcode=0xfa (vendor) [ 1050.051404] sd 0:0:1:0: [sg0] tag#4756 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1050.060301] sd 0:0:1:0: [sg0] tag#4756 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1050.069194] sd 0:0:1:0: [sg0] tag#4756 CDB[20]: 65 07:03:33 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000001680)={'filter\x00', 0x7, 0x4, 0x4c8, 0xe8, 0x0, 0xe8, 0x3e0, 0x3e0, 0x3e0, 0x4, &(0x7f0000000040), {[{{@arp={@loopback, @private=0xa010101, 0xff, 0xff, 0x9, 0x6, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x8, 0x6, 0x1, 0xc854, 0x2, 0x6, 'tunl0\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x691c1ceef33c4cfd}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xf, 0xffffffff}}}, {{@arp={@broadcast, @empty, 0x0, 0xffffffff, 0x3, 0x1, {@empty, {[0x0, 0xff, 0x945c1da232f61310, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x800, 0x1, 0x5a9, 0x8, 0x100, 0x80, 'team_slave_0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x0, 0x104}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x9, 'system_u:object_r:system_dbusd_var_lib_t:s0\x00'}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x518) getdents(r0, &(0x7f0000000680)=""/4094, 0xffe) 07:03:33 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:33 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xfeff) 07:03:33 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:33 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x0, 0x1, 0x98, 0x5}]}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:33 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xff03) 07:03:33 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:33 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:03:33 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 1050.324652] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 07:03:33 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xff0f) [ 1050.383263] sd 0:0:1:0: [sg0] tag#4793 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1050.392251] sd 0:0:1:0: [sg0] tag#4793 CDB: opcode=0xfa (vendor) [ 1050.398434] sd 0:0:1:0: [sg0] tag#4793 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1050.407384] sd 0:0:1:0: [sg0] tag#4793 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1050.416287] sd 0:0:1:0: [sg0] tag#4793 CDB[20]: 65 07:03:33 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1050.464143] EXT4-fs error (device loop3): ext4_readdir:241: inode #2: block 37: comm syz-executor.3: path /root/syzkaller-testdir309404719/syzkaller.Rt4wJE/3362/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=0, rec_len=0, name_len=0, size=1024 [ 1050.526674] device veth37 entered promiscuous mode 07:03:34 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000001680)={'filter\x00', 0x7, 0x4, 0x4c8, 0xe8, 0x0, 0xe8, 0x3e0, 0x3e0, 0x3e0, 0x4, &(0x7f0000000040), {[{{@arp={@loopback, @private=0xa010101, 0xff, 0xff, 0x9, 0x6, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x8, 0x6, 0x1, 0xc854, 0x2, 0x6, 'tunl0\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x691c1ceef33c4cfd}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xf, 0xffffffff}}}, {{@arp={@broadcast, @empty, 0x0, 0xffffffff, 0x3, 0x1, {@empty, {[0x0, 0xff, 0x945c1da232f61310, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x800, 0x1, 0x5a9, 0x8, 0x100, 0x80, 'team_slave_0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x0, 0x104}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x9, 'system_u:object_r:system_dbusd_var_lib_t:s0\x00'}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x518) getdents(r0, &(0x7f0000000680)=""/4094, 0xffe) 07:03:34 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xfffe) [ 1050.560363] IPv6: ADDRCONF(NETDEV_UP): veth37: link is not ready 07:03:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1050.641772] sd 0:0:1:0: [sg0] tag#4793 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1050.650711] sd 0:0:1:0: [sg0] tag#4793 CDB: opcode=0xfa (vendor) [ 1050.656889] sd 0:0:1:0: [sg0] tag#4793 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1050.666857] sd 0:0:1:0: [sg0] tag#4793 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1050.675775] sd 0:0:1:0: [sg0] tag#4793 CDB[20]: 65 [ 1050.719468] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1050.764462] EXT4-fs error (device loop3): ext4_empty_dir:2762: inode #12: comm syz-executor.3: Directory hole found for htree leaf block [ 1050.787898] EXT4-fs error (device loop3): ext4_free_inode:350: comm syz-executor.3: bit already cleared for inode 12 [ 1050.831229] EXT4-fs error (device loop3): ext4_readdir:241: inode #2: block 37: comm syz-executor.3: path /root/syzkaller-testdir309404719/syzkaller.Rt4wJE/3363/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=0, rec_len=0, name_len=0, size=1024 07:03:34 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1050.873264] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 07:03:34 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:34 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x33fe0) 07:03:34 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:03:34 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000001680)={'filter\x00', 0x7, 0x4, 0x4c8, 0xe8, 0x0, 0xe8, 0x3e0, 0x3e0, 0x3e0, 0x4, &(0x7f0000000040), {[{{@arp={@loopback, @private=0xa010101, 0xff, 0xff, 0x9, 0x6, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x8, 0x6, 0x1, 0xc854, 0x2, 0x6, 'tunl0\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x691c1ceef33c4cfd}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xf, 0xffffffff}}}, {{@arp={@broadcast, @empty, 0x0, 0xffffffff, 0x3, 0x1, {@empty, {[0x0, 0xff, 0x945c1da232f61310, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x800, 0x1, 0x5a9, 0x8, 0x100, 0x80, 'team_slave_0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x0, 0x104}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x9, 'system_u:object_r:system_dbusd_var_lib_t:s0\x00'}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x518) getdents(r0, &(0x7f0000000680)=""/4094, 0xffe) [ 1051.021340] sd 0:0:1:0: [sg0] tag#4793 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1051.030194] sd 0:0:1:0: [sg0] tag#4793 CDB: opcode=0xfa (vendor) [ 1051.036369] sd 0:0:1:0: [sg0] tag#4793 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1051.045268] sd 0:0:1:0: [sg0] tag#4793 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1051.054162] sd 0:0:1:0: [sg0] tag#4793 CDB[20]: 65 [ 1051.065838] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 07:03:34 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:34 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x34000) [ 1051.152099] device veth29 entered promiscuous mode [ 1051.184954] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1051.204931] IPv6: ADDRCONF(NETDEV_UP): veth29: link is not ready 07:03:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1051.223902] EXT4-fs error (device loop3): ext4_empty_dir:2762: inode #12: comm syz-executor.3: Directory hole found for htree leaf block [ 1051.291167] EXT4-fs error (device loop3): ext4_free_inode:350: comm syz-executor.3: bit already cleared for inode 12 [ 1051.314128] sd 0:0:1:0: [sg0] tag#4756 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1051.323727] sd 0:0:1:0: [sg0] tag#4756 CDB: opcode=0xfa (vendor) [ 1051.330363] sd 0:0:1:0: [sg0] tag#4756 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1051.339282] sd 0:0:1:0: [sg0] tag#4756 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1051.348145] sd 0:0:1:0: [sg0] tag#4756 CDB[20]: 65 [ 1051.354938] EXT4-fs error (device loop3): ext4_readdir:241: inode #2: block 37: comm syz-executor.3: path /root/syzkaller-testdir309404719/syzkaller.Rt4wJE/3364/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=0, rec_len=0, name_len=0, size=1024 07:03:34 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000001680)={'filter\x00', 0x7, 0x4, 0x4c8, 0xe8, 0x0, 0xe8, 0x3e0, 0x3e0, 0x3e0, 0x4, &(0x7f0000000040), {[{{@arp={@loopback, @private=0xa010101, 0xff, 0xff, 0x9, 0x6, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x8, 0x6, 0x1, 0xc854, 0x2, 0x6, 'tunl0\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x691c1ceef33c4cfd}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xf, 0xffffffff}}}, {{@arp={@broadcast, @empty, 0x0, 0xffffffff, 0x3, 0x1, {@empty, {[0x0, 0xff, 0x945c1da232f61310, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x800, 0x1, 0x5a9, 0x8, 0x100, 0x80, 'team_slave_0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x0, 0x104}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x9, 'system_u:object_r:system_dbusd_var_lib_t:s0\x00'}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x518) 07:03:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1051.548277] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 07:03:35 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x40000) 07:03:35 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 1051.641014] sd 0:0:1:0: [sg0] tag#4793 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1051.649910] sd 0:0:1:0: [sg0] tag#4793 CDB: opcode=0xfa (vendor) [ 1051.656092] sd 0:0:1:0: [sg0] tag#4793 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1051.664999] sd 0:0:1:0: [sg0] tag#4793 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1051.673931] sd 0:0:1:0: [sg0] tag#4793 CDB[20]: 65 [ 1051.680255] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 07:03:35 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:35 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:35 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x400300) 07:03:35 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:35 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) 07:03:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1051.869935] nla_parse: 20 callbacks suppressed [ 1051.869944] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1051.903836] sd 0:0:1:0: [sg0] tag#4793 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1051.912681] sd 0:0:1:0: [sg0] tag#4793 CDB: opcode=0xfa (vendor) [ 1051.918873] sd 0:0:1:0: [sg0] tag#4793 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1051.927802] sd 0:0:1:0: [sg0] tag#4793 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1051.936754] sd 0:0:1:0: [sg0] tag#4793 CDB[20]: 65 07:03:35 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xf0ffff) 07:03:35 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:35 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:35 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 1051.980828] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 07:03:35 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) 07:03:35 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x1000000) [ 1052.091054] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:03:35 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1052.144806] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:03:35 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x2000000) [ 1052.218118] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 07:03:35 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:35 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1052.270270] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1052.322584] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1052.356237] sd 0:0:1:0: [sg0] tag#4756 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1052.365143] sd 0:0:1:0: [sg0] tag#4756 CDB: opcode=0xfa (vendor) 07:03:35 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 1052.371383] sd 0:0:1:0: [sg0] tag#4756 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1052.380298] sd 0:0:1:0: [sg0] tag#4756 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1052.389203] sd 0:0:1:0: [sg0] tag#4756 CDB[20]: 65 [ 1052.395970] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 07:03:35 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:35 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 1052.425770] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:03:35 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x3000000) 07:03:36 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1052.533965] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1052.555948] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1052.607177] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1052.619742] sd 0:0:1:0: [sg0] tag#4756 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1052.628509] sd 0:0:1:0: [sg0] tag#4756 CDB: opcode=0xfa (vendor) [ 1052.634781] sd 0:0:1:0: [sg0] tag#4756 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1052.643740] sd 0:0:1:0: [sg0] tag#4756 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae 07:03:36 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:36 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1052.653571] sd 0:0:1:0: [sg0] tag#4756 CDB[20]: 65 07:03:36 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:36 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x4000000) [ 1052.738527] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:03:36 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:36 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:03:36 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 1052.870211] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 07:03:36 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 1052.911631] sd 0:0:1:0: [sg0] tag#4756 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1052.920426] sd 0:0:1:0: [sg0] tag#4756 CDB: opcode=0xfa (vendor) [ 1052.926602] sd 0:0:1:0: [sg0] tag#4756 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1052.935536] sd 0:0:1:0: [sg0] tag#4756 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1052.944445] sd 0:0:1:0: [sg0] tag#4756 CDB[20]: 65 07:03:36 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:36 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x5000000) 07:03:36 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:36 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:03:36 executing program 3: syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:36 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:36 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x6000000) 07:03:36 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:36 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:36 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:03:36 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:36 executing program 3: syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:36 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:36 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x7000000) 07:03:36 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:36 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:36 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x8000000) 07:03:36 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:03:36 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:36 executing program 3: syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:36 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1053.408856] validate_nla: 9 callbacks suppressed [ 1053.408864] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 07:03:36 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xa000000) 07:03:36 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1053.501557] device veth43 entered promiscuous mode [ 1053.517463] IPv6: ADDRCONF(NETDEV_UP): veth43: link is not ready 07:03:37 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1053.775027] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1053.845210] device veth35 entered promiscuous mode [ 1053.883383] IPv6: ADDRCONF(NETDEV_UP): veth35: link is not ready 07:03:37 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:37 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:03:37 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:37 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xc000000) 07:03:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) 07:03:37 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 1054.160624] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 07:03:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) 07:03:37 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:03:37 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:37 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xe000000) 07:03:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) [ 1054.300834] device veth43 entered promiscuous mode [ 1054.347240] IPv6: ADDRCONF(NETDEV_UP): veth43: link is not ready 07:03:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1054.414168] device veth35 entered promiscuous mode [ 1054.465500] IPv6: ADDRCONF(NETDEV_UP): veth35: link is not ready [ 1054.529564] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (74 blocks) [ 1054.735950] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 07:03:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11bb}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:03:38 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xf000000) 07:03:38 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r3, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:38 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:38 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r3, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 1054.984612] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (74 blocks) [ 1054.994781] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 07:03:38 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1055.112168] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 07:03:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:03:38 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r3, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:38 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x10000000) 07:03:38 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r3, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1055.298176] scsi_io_completion_action: 7 callbacks suppressed [ 1055.298215] sd 0:0:1:0: [sg0] tag#4756 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1055.314079] sd 0:0:1:0: [sg0] tag#4756 CDB: opcode=0xfa (vendor) [ 1055.320585] sd 0:0:1:0: [sg0] tag#4756 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1055.329494] sd 0:0:1:0: [sg0] tag#4756 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1055.338393] sd 0:0:1:0: [sg0] tag#4756 CDB[20]: 65 07:03:38 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:38 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r3, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 1055.340695] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (74 blocks) [ 1055.394024] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 07:03:38 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r3, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:38 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:38 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x20000000) 07:03:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:39 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r3, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 1055.569210] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (74 blocks) [ 1055.581787] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 07:03:39 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:03:39 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r3, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:39 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:39 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x48000000) [ 1055.744821] device veth49 entered promiscuous mode [ 1055.785387] IPv6: ADDRCONF(NETDEV_UP): veth49: link is not ready [ 1055.798208] sd 0:0:1:0: [sg0] tag#4793 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1055.807049] sd 0:0:1:0: [sg0] tag#4793 CDB: opcode=0xfa (vendor) [ 1055.813288] sd 0:0:1:0: [sg0] tag#4793 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1055.822204] sd 0:0:1:0: [sg0] tag#4793 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae 07:03:39 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:39 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r3, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:39 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x4c000000) [ 1055.831106] sd 0:0:1:0: [sg0] tag#4793 CDB[20]: 65 [ 1055.832219] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (74 blocks) [ 1055.872605] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 07:03:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1055.954268] device veth41 entered promiscuous mode [ 1055.972027] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (74 blocks) [ 1055.979562] IPv6: ADDRCONF(NETDEV_UP): veth41: link is not ready [ 1056.004903] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 07:03:39 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:03:39 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r3, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:39 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1056.131163] device veth50 entered promiscuous mode [ 1056.146206] sd 0:0:1:0: [sg0] tag#4793 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1056.154978] sd 0:0:1:0: [sg0] tag#4793 CDB: opcode=0xfa (vendor) [ 1056.161367] sd 0:0:1:0: [sg0] tag#4793 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1056.170293] sd 0:0:1:0: [sg0] tag#4793 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae 07:03:39 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x60000000) [ 1056.179210] sd 0:0:1:0: [sg0] tag#4793 CDB[20]: 65 [ 1056.237782] IPv6: ADDRCONF(NETDEV_UP): veth50: link is not ready [ 1056.286206] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 07:03:39 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r3, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1056.422929] device veth42 entered promiscuous mode [ 1056.485596] IPv6: ADDRCONF(NETDEV_UP): veth42: link is not ready [ 1056.510161] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (32 blocks) 07:03:40 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:40 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r3, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5100}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1056.660851] device veth51 entered promiscuous mode 07:03:40 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x65580000) [ 1056.706793] IPv6: ADDRCONF(NETDEV_UP): veth51: link is not ready [ 1056.743469] sd 0:0:1:0: [sg0] tag#4793 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK 07:03:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1056.752212] sd 0:0:1:0: [sg0] tag#4793 CDB: opcode=0xfa (vendor) [ 1056.758404] sd 0:0:1:0: [sg0] tag#4793 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1056.767380] sd 0:0:1:0: [sg0] tag#4793 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1056.776277] sd 0:0:1:0: [sg0] tag#4793 CDB[20]: 65 07:03:40 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 1056.851334] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (32 blocks) 07:03:40 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1056.926507] device veth43 entered promiscuous mode 07:03:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002", 0x1b, 0x4000}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1057.027911] IPv6: ADDRCONF(NETDEV_UP): veth43: link is not ready [ 1057.047536] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (32 blocks) [ 1057.079904] nla_parse: 34 callbacks suppressed [ 1057.079911] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 07:03:40 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 1057.176127] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:03:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:03:40 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x68000000) 07:03:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1057.302508] sd 0:0:1:0: [sg0] tag#4793 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1057.311510] sd 0:0:1:0: [sg0] tag#4793 CDB: opcode=0xfa (vendor) [ 1057.317689] sd 0:0:1:0: [sg0] tag#4793 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1057.326591] sd 0:0:1:0: [sg0] tag#4793 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1057.335485] sd 0:0:1:0: [sg0] tag#4793 CDB[20]: 65 [ 1057.363192] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1057.392928] device veth52 entered promiscuous mode 07:03:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1057.425452] IPv6: ADDRCONF(NETDEV_UP): veth52: link is not ready 07:03:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1057.503955] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (12 blocks) [ 1057.595801] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (12 blocks) 07:03:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:41 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1057.719494] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (12 blocks) [ 1057.738296] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1057.824426] device veth44 entered promiscuous mode [ 1057.862291] EXT4-fs error (device loop3): ext4_fill_super:4448: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1057.871121] IPv6: ADDRCONF(NETDEV_UP): veth44: link is not ready [ 1057.875295] EXT4-fs (loop3): get root inode failed [ 1057.885956] EXT4-fs (loop3): mount failed [ 1057.889433] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 07:03:41 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:41 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x6c000000) 07:03:41 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:41 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:03:41 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1058.126349] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1058.146920] EXT4-fs error (device loop3): ext4_fill_super:4448: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1058.175827] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1058.198104] sd 0:0:1:0: [sg0] tag#4756 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1058.206993] sd 0:0:1:0: [sg0] tag#4756 CDB: opcode=0xfa (vendor) [ 1058.213227] sd 0:0:1:0: [sg0] tag#4756 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1058.222192] sd 0:0:1:0: [sg0] tag#4756 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1058.231106] sd 0:0:1:0: [sg0] tag#4756 CDB[20]: 65 [ 1058.249597] EXT4-fs (loop3): get root inode failed 07:03:41 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x74000000) [ 1058.280296] EXT4-fs (loop3): mount failed [ 1058.304077] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:03:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1058.391397] device veth44 entered promiscuous mode [ 1058.419682] IPv6: ADDRCONF(NETDEV_UP): veth44: link is not ready [ 1058.447553] EXT4-fs error (device loop3): ext4_fill_super:4448: inode #2: comm syz-executor.3: iget: root inode unallocated 07:03:41 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1058.491716] EXT4-fs (loop3): get root inode failed [ 1058.511544] EXT4-fs (loop3): mount failed [ 1058.542659] sd 0:0:1:0: [sg0] tag#4793 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1058.551667] sd 0:0:1:0: [sg0] tag#4793 CDB: opcode=0xfa (vendor) [ 1058.557867] sd 0:0:1:0: [sg0] tag#4793 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1058.566899] sd 0:0:1:0: [sg0] tag#4793 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1058.575823] sd 0:0:1:0: [sg0] tag#4793 CDB[20]: 65 07:03:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1058.697383] EXT4-fs error (device loop3): ext4_fill_super:4448: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1058.709417] EXT4-fs (loop3): get root inode failed [ 1058.718528] EXT4-fs (loop3): mount failed 07:03:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1058.813377] EXT4-fs error (device loop3): ext4_fill_super:4448: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1058.830223] EXT4-fs (loop3): get root inode failed [ 1058.835392] EXT4-fs (loop3): mount failed [ 1058.851105] device veth52 entered promiscuous mode 07:03:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1058.863334] IPv6: ADDRCONF(NETDEV_UP): veth52: link is not ready [ 1058.884976] validate_nla: 4 callbacks suppressed [ 1058.884983] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1058.898290] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1058.935904] EXT4-fs error (device loop3): ext4_fill_super:4448: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1058.953501] EXT4-fs (loop3): get root inode failed [ 1058.961754] EXT4-fs (loop3): mount failed 07:03:42 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:42 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x77270000) 07:03:42 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00), 0x0, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:42 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:03:42 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1059.224577] sd 0:0:1:0: [sg0] tag#4793 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1059.230456] EXT4-fs error (device loop3): ext4_fill_super:4448: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1059.233396] sd 0:0:1:0: [sg0] tag#4793 CDB: opcode=0xfa (vendor) [ 1059.250950] sd 0:0:1:0: [sg0] tag#4793 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1059.258200] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1059.259834] sd 0:0:1:0: [sg0] tag#4793 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1059.277325] sd 0:0:1:0: [sg0] tag#4793 CDB[20]: 65 07:03:42 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1059.332271] EXT4-fs (loop3): get root inode failed [ 1059.346250] EXT4-fs (loop3): mount failed [ 1059.347891] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:03:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00), 0x0, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1059.441075] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1059.475102] device veth44 entered promiscuous mode 07:03:42 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x7a000000) [ 1059.531244] IPv6: ADDRCONF(NETDEV_UP): veth44: link is not ready 07:03:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1059.582449] EXT4-fs error (device loop3): ext4_fill_super:4448: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1059.602899] device veth52 entered promiscuous mode [ 1059.603374] EXT4-fs (loop3): get root inode failed [ 1059.616084] EXT4-fs (loop3): mount failed [ 1059.639282] IPv6: ADDRCONF(NETDEV_UP): veth52: link is not ready [ 1059.676761] sd 0:0:1:0: [sg0] tag#4756 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK 07:03:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00), 0x0, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1059.685678] sd 0:0:1:0: [sg0] tag#4756 CDB: opcode=0xfa (vendor) [ 1059.691998] sd 0:0:1:0: [sg0] tag#4756 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1059.700934] sd 0:0:1:0: [sg0] tag#4756 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1059.709846] sd 0:0:1:0: [sg0] tag#4756 CDB[20]: 65 [ 1059.756754] EXT4-fs error (device loop3): ext4_fill_super:4448: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1059.777354] EXT4-fs (loop3): get root inode failed [ 1059.783996] EXT4-fs (loop3): mount failed 07:03:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f00", 0x15, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1059.882907] EXT4-fs error (device loop3): ext4_fill_super:4448: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1059.915076] EXT4-fs (loop3): get root inode failed [ 1059.923256] EXT4-fs (loop3): mount failed [ 1060.081009] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 07:03:43 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f00", 0x15, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:43 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:43 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, 0x0, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb11}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1060.224048] sd 0:0:1:0: [sg0] tag#4756 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1060.232766] EXT4-fs error (device loop3): ext4_fill_super:4448: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1060.232985] EXT4-fs (loop3): get root inode failed [ 1060.232992] EXT4-fs (loop3): mount failed [ 1060.254445] sd 0:0:1:0: [sg0] tag#4756 CDB: opcode=0xfa (vendor) [ 1060.260666] sd 0:0:1:0: [sg0] tag#4756 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b 07:03:43 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x81000000) 07:03:43 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, 0x0, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1060.269585] sd 0:0:1:0: [sg0] tag#4756 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1060.278568] sd 0:0:1:0: [sg0] tag#4756 CDB[20]: 65 07:03:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f00", 0x15, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:03:43 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x88a8ffff) [ 1060.455864] EXT4-fs error (device loop3): ext4_fill_super:4448: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1060.466689] sd 0:0:1:0: [sg0] tag#4793 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1060.476102] sd 0:0:1:0: [sg0] tag#4793 CDB: opcode=0xfa (vendor) [ 1060.482335] sd 0:0:1:0: [sg0] tag#4793 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1060.491255] sd 0:0:1:0: [sg0] tag#4793 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1060.500173] sd 0:0:1:0: [sg0] tag#4793 CDB[20]: 65 [ 1060.542360] EXT4-fs (loop3): get root inode failed [ 1060.547800] device veth44 entered promiscuous mode [ 1060.591906] EXT4-fs (loop3): mount failed [ 1060.597602] IPv6: ADDRCONF(NETDEV_UP): veth44: link is not ready 07:03:44 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x9effffff) 07:03:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f0000000000000400020000", 0x1f, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1060.822966] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1060.983422] device veth52 entered promiscuous mode [ 1060.999431] IPv6: ADDRCONF(NETDEV_UP): veth52: link is not ready 07:03:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f00", 0x15, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:44 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xc0000000) 07:03:44 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:03:44 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, 0x0, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:44 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:44 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 1061.242775] sd 0:0:1:0: [sg0] tag#4756 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1061.252558] sd 0:0:1:0: [sg0] tag#4756 CDB: opcode=0xfa (vendor) [ 1061.259061] sd 0:0:1:0: [sg0] tag#4756 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1061.267961] sd 0:0:1:0: [sg0] tag#4756 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1061.276876] sd 0:0:1:0: [sg0] tag#4756 CDB[20]: 65 07:03:44 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xc00e0000) [ 1061.318337] EXT4-fs error (device loop3): ext4_fill_super:4448: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1061.385374] EXT4-fs (loop3): get root inode failed [ 1061.405340] device veth44 entered promiscuous mode [ 1061.425830] EXT4-fs (loop3): mount failed [ 1061.444970] IPv6: ADDRCONF(NETDEV_UP): veth44: link is not ready 07:03:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f00", 0x15, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:44 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xe03f0300) [ 1061.573069] EXT4-fs error (device loop3): ext4_fill_super:4448: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1061.591604] EXT4-fs (loop3): get root inode failed [ 1061.597368] EXT4-fs (loop3): mount failed 07:03:45 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xeffdffff) 07:03:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f00", 0x15, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:45 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xf0ffffff) 07:03:45 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xfeff0000) [ 1061.736764] EXT4-fs error (device loop3): ext4_fill_super:4448: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1061.755334] EXT4-fs (loop3): get root inode failed [ 1061.762311] EXT4-fs (loop3): mount failed 07:03:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000", 0x1a, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1061.895100] device veth52 entered promiscuous mode [ 1061.917062] EXT4-fs error (device loop3): ext4_fill_super:4448: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1061.921701] IPv6: ADDRCONF(NETDEV_UP): veth52: link is not ready [ 1061.929328] EXT4-fs (loop3): get root inode failed [ 1061.941252] EXT4-fs (loop3): mount failed 07:03:45 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:03:45 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xff030000) 07:03:45 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000", 0x1a, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:45 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:45 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:45 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xff0f0000) [ 1062.253428] sd 0:0:1:0: [sg0] tag#4793 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1062.262289] sd 0:0:1:0: [sg0] tag#4793 CDB: opcode=0xfa (vendor) [ 1062.268635] sd 0:0:1:0: [sg0] tag#4793 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1062.277913] sd 0:0:1:0: [sg0] tag#4793 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1062.286874] sd 0:0:1:0: [sg0] tag#4793 CDB[20]: 65 [ 1062.298337] nla_parse: 6 callbacks suppressed 07:03:45 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1062.298345] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1062.327988] EXT4-fs error (device loop3): ext4_fill_super:4448: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1062.362312] EXT4-fs (loop3): get root inode failed [ 1062.374734] EXT4-fs (loop3): mount failed 07:03:45 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xffffa888) 07:03:45 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1062.416200] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:03:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000", 0x1a, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:46 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xfffff000) [ 1062.510288] sd 0:0:1:0: [sg0] tag#4793 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1062.519220] sd 0:0:1:0: [sg0] tag#4793 CDB: opcode=0xfa (vendor) [ 1062.525431] sd 0:0:1:0: [sg0] tag#4793 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1062.534362] sd 0:0:1:0: [sg0] tag#4793 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1062.543298] sd 0:0:1:0: [sg0] tag#4793 CDB[20]: 65 [ 1062.562436] EXT4-fs error (device loop3): ext4_fill_super:4448: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1062.614643] device veth44 entered promiscuous mode [ 1062.618063] EXT4-fs (loop3): get root inode failed [ 1062.630378] EXT4-fs (loop3): mount failed [ 1062.657139] IPv6: ADDRCONF(NETDEV_UP): veth44: link is not ready 07:03:46 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xfffffdef) 07:03:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1062.751772] device veth52 entered promiscuous mode [ 1062.790927] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1062.807673] IPv6: ADDRCONF(NETDEV_UP): veth52: link is not ready 07:03:46 executing program 5: connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:46 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xffffff7f) 07:03:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f00000000000004", 0x1b, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:46 executing program 2: connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:46 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1063.207538] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1063.220786] sd 0:0:1:0: [sg0] tag#4756 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1063.229586] sd 0:0:1:0: [sg0] tag#4756 CDB: opcode=0xfa (vendor) [ 1063.235773] sd 0:0:1:0: [sg0] tag#4756 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1063.245402] sd 0:0:1:0: [sg0] tag#4756 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1063.254309] sd 0:0:1:0: [sg0] tag#4756 CDB[20]: 65 [ 1063.272878] EXT4-fs (loop3): corrupt root inode, run e2fsck 07:03:46 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xffffff9e) [ 1063.330071] EXT4-fs (loop3): mount failed [ 1063.363910] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:03:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f00000000000004", 0x1b, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1063.521513] device veth52 entered promiscuous mode 07:03:47 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xfffffff0) [ 1063.557735] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 1063.567104] IPv6: ADDRCONF(NETDEV_UP): veth52: link is not ready 07:03:47 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1063.626499] EXT4-fs (loop3): mount failed 07:03:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f00000000000004", 0x1b, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1063.715331] device veth44 entered promiscuous mode [ 1063.735346] sd 0:0:1:0: [sg0] tag#4756 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1063.744264] sd 0:0:1:0: [sg0] tag#4756 CDB: opcode=0xfa (vendor) [ 1063.750495] sd 0:0:1:0: [sg0] tag#4756 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b 07:03:47 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x4000000000000) [ 1063.759407] sd 0:0:1:0: [sg0] tag#4756 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1063.760036] IPv6: ADDRCONF(NETDEV_UP): veth44: link is not ready [ 1063.768266] sd 0:0:1:0: [sg0] tag#4756 CDB[20]: 65 [ 1063.816108] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 1063.827655] EXT4-fs (loop3): mount failed [ 1064.088321] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1064.096900] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 07:03:47 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f0000000000000400", 0x1c, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:47 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:03:47 executing program 2: connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:47 executing program 5: connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 1064.207259] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1064.232277] sd 0:0:1:0: [sg0] tag#4756 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1064.241257] sd 0:0:1:0: [sg0] tag#4756 CDB: opcode=0xfa (vendor) [ 1064.247447] sd 0:0:1:0: [sg0] tag#4756 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1064.256375] sd 0:0:1:0: [sg0] tag#4756 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1064.265409] sd 0:0:1:0: [sg0] tag#4756 CDB[20]: 65 [ 1064.277210] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1064.302366] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 1064.323950] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:03:47 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x40030000000000) [ 1064.348815] EXT4-fs (loop3): mount failed 07:03:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f0000000000000400", 0x1c, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:47 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1064.449945] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1064.566113] sd 0:0:1:0: [sg0] tag#4794 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1064.575078] sd 0:0:1:0: [sg0] tag#4794 CDB: opcode=0xfa (vendor) [ 1064.581211] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 1064.581311] sd 0:0:1:0: [sg0] tag#4794 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1064.595982] sd 0:0:1:0: [sg0] tag#4794 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1064.604887] sd 0:0:1:0: [sg0] tag#4794 CDB[20]: 65 [ 1064.623121] device veth44 entered promiscuous mode [ 1064.635871] EXT4-fs (loop3): mount failed [ 1064.658355] IPv6: ADDRCONF(NETDEV_UP): veth44: link is not ready 07:03:48 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f0000000000000400", 0x1c, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1064.850805] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 1064.857080] EXT4-fs (loop3): mount failed [ 1064.921624] EXT4-fs error (device loop3): ext4_fill_super:4448: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1064.940793] EXT4-fs (loop3): get root inode failed [ 1064.945787] EXT4-fs (loop3): mount failed 07:03:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1065.044287] EXT4-fs error (device loop3): ext4_fill_super:4448: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1065.062424] EXT4-fs (loop3): get root inode failed [ 1065.067580] EXT4-fs (loop3): mount failed 07:03:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1065.091126] device veth52 entered promiscuous mode [ 1065.136070] EXT4-fs error (device loop3): ext4_fill_super:4448: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1065.137840] IPv6: ADDRCONF(NETDEV_UP): veth52: link is not ready [ 1065.149294] EXT4-fs (loop3): get root inode failed [ 1065.161234] EXT4-fs (loop3): mount failed 07:03:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1065.263650] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1065.273714] EXT4-fs (loop3): group descriptors corrupted! [ 1065.327912] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1065.340705] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1065.351646] sd 0:0:1:0: [sg0] tag#4756 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1065.353891] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1065.360434] sd 0:0:1:0: [sg0] tag#4756 CDB: opcode=0xfa (vendor) 07:03:48 executing program 2: connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 1065.370163] EXT4-fs (loop3): group descriptors corrupted! [ 1065.375983] sd 0:0:1:0: [sg0] tag#4756 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1065.376013] sd 0:0:1:0: [sg0] tag#4756 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1065.399359] sd 0:0:1:0: [sg0] tag#4756 CDB[20]: 65 [ 1065.404878] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 07:03:48 executing program 5: connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 1065.470236] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 07:03:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:49 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xf0ffffffffffff) [ 1065.600023] device veth44 entered promiscuous mode [ 1065.655398] IPv6: ADDRCONF(NETDEV_UP): veth44: link is not ready [ 1065.678983] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! 07:03:49 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:03:49 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x100000000000000) [ 1065.761367] EXT4-fs (loop3): group descriptors corrupted! 07:03:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1065.854364] sd 0:0:1:0: [sg0] tag#4794 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1065.863820] sd 0:0:1:0: [sg0] tag#4794 CDB: opcode=0xfa (vendor) [ 1065.870134] sd 0:0:1:0: [sg0] tag#4794 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1065.879022] sd 0:0:1:0: [sg0] tag#4794 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1065.887885] sd 0:0:1:0: [sg0] tag#4794 CDB[20]: 65 [ 1065.966107] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1066.001983] EXT4-fs (loop3): group descriptors corrupted! 07:03:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1066.163537] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1066.196081] EXT4-fs (loop3): group descriptors corrupted! 07:03:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1066.361896] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1066.380638] EXT4-fs (loop3): group descriptors corrupted! [ 1066.435027] device veth52 entered promiscuous mode 07:03:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300), 0x0, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1066.510326] IPv6: ADDRCONF(NETDEV_UP): veth52: link is not ready [ 1066.580156] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1066.628351] EXT4-fs (loop3): group descriptors corrupted! [ 1066.636857] sd 0:0:1:0: [sg0] tag#4794 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1066.645987] sd 0:0:1:0: [sg0] tag#4794 CDB: opcode=0xfa (vendor) [ 1066.652212] sd 0:0:1:0: [sg0] tag#4794 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1066.661134] sd 0:0:1:0: [sg0] tag#4794 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1066.670045] sd 0:0:1:0: [sg0] tag#4794 CDB[20]: 65 07:03:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300), 0x0, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1066.791277] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1066.816375] EXT4-fs (loop3): group descriptors corrupted! [ 1066.917275] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1066.968569] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 07:03:50 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300), 0x0, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:03:50 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:50 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:50 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x200000000000000) [ 1067.135739] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1067.153207] sd 0:0:1:0: [sg0] tag#4794 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1067.162012] sd 0:0:1:0: [sg0] tag#4794 CDB: opcode=0xfa (vendor) [ 1067.168191] sd 0:0:1:0: [sg0] tag#4794 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1067.177105] sd 0:0:1:0: [sg0] tag#4794 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1067.186031] sd 0:0:1:0: [sg0] tag#4794 CDB[20]: 65 [ 1067.244516] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1067.245612] EXT4-fs (loop3): group descriptors corrupted! [ 1067.326795] device veth44 entered promiscuous mode 07:03:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="0300000004", 0x5, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:50 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x300000000000000) [ 1067.390778] IPv6: ADDRCONF(NETDEV_UP): veth44: link is not ready [ 1067.431443] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! 07:03:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1067.506882] EXT4-fs (loop3): group descriptors corrupted! [ 1067.520104] sd 0:0:1:0: [sg0] tag#4794 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1067.528942] sd 0:0:1:0: [sg0] tag#4794 CDB: opcode=0xfa (vendor) [ 1067.535128] sd 0:0:1:0: [sg0] tag#4794 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1067.544097] sd 0:0:1:0: [sg0] tag#4794 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1067.553040] sd 0:0:1:0: [sg0] tag#4794 CDB[20]: 65 07:03:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="0300000004", 0x5, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1067.657863] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1067.684173] EXT4-fs (loop3): group descriptors corrupted! 07:03:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="0300000004", 0x5, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1067.809807] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1067.823617] device veth52 entered promiscuous mode [ 1067.834147] EXT4-fs (loop3): group descriptors corrupted! [ 1067.846721] IPv6: ADDRCONF(NETDEV_UP): veth52: link is not ready 07:03:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="03000000040000", 0x7, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1067.947428] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1067.970381] EXT4-fs (loop3): group descriptors corrupted! [ 1068.020871] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1068.028333] nla_parse: 7 callbacks suppressed [ 1068.028339] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 07:03:51 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:51 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="03000000040000", 0x7, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:03:51 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:51 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x400000000000000) [ 1068.169759] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1068.185857] sd 0:0:1:0: [sg0] tag#4794 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1068.194824] sd 0:0:1:0: [sg0] tag#4794 CDB: opcode=0xfa (vendor) [ 1068.201045] sd 0:0:1:0: [sg0] tag#4794 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1068.209954] sd 0:0:1:0: [sg0] tag#4794 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1068.219371] sd 0:0:1:0: [sg0] tag#4794 CDB[20]: 65 07:03:51 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1068.244609] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1068.263148] EXT4-fs (loop3): group descriptors corrupted! 07:03:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="03000000040000", 0x7, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1068.396476] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1068.481437] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! 07:03:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1068.535490] EXT4-fs (loop3): group descriptors corrupted! [ 1068.560983] device veth44 entered promiscuous mode [ 1068.602702] sd 0:0:1:0: [sg0] tag#4756 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1068.603399] IPv6: ADDRCONF(NETDEV_UP): veth44: link is not ready [ 1068.611672] sd 0:0:1:0: [sg0] tag#4756 CDB: opcode=0xfa (vendor) [ 1068.624574] sd 0:0:1:0: [sg0] tag#4756 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1068.633723] sd 0:0:1:0: [sg0] tag#4756 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1068.642642] sd 0:0:1:0: [sg0] tag#4756 CDB[20]: 65 07:03:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="0300000004000000", 0x8, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1068.651086] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1068.668023] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 07:03:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="0300000004000000", 0x8, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:52 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x500000000000000) [ 1068.703948] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1068.714166] EXT4-fs (loop3): group descriptors corrupted! [ 1068.820725] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1068.848228] EXT4-fs (loop3): group descriptors corrupted! [ 1068.941738] device veth52 entered promiscuous mode [ 1068.952933] IPv6: ADDRCONF(NETDEV_UP): veth52: link is not ready [ 1069.076867] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1069.098560] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 07:03:52 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:03:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="0300000004000000", 0x8, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:52 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:52 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 1069.244098] sd 0:0:1:0: [sg0] tag#4756 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1069.253015] sd 0:0:1:0: [sg0] tag#4756 CDB: opcode=0xfa (vendor) [ 1069.259256] sd 0:0:1:0: [sg0] tag#4756 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1069.268286] sd 0:0:1:0: [sg0] tag#4756 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1069.277144] sd 0:0:1:0: [sg0] tag#4756 CDB[20]: 65 07:03:52 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x600000000000000) [ 1069.297642] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1069.327529] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:03:52 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1069.349611] EXT4-fs (loop3): group descriptors corrupted! 07:03:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1069.394360] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1069.516060] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1069.517035] device veth44 entered promiscuous mode 07:03:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1069.587393] EXT4-fs (loop3): group descriptors corrupted! [ 1069.636481] IPv6: ADDRCONF(NETDEV_UP): veth44: link is not ready [ 1069.637682] sd 0:0:1:0: [sg0] tag#4795 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1069.652038] sd 0:0:1:0: [sg0] tag#4795 CDB: opcode=0xfa (vendor) [ 1069.658325] sd 0:0:1:0: [sg0] tag#4795 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1069.667184] sd 0:0:1:0: [sg0] tag#4795 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1069.676074] sd 0:0:1:0: [sg0] tag#4795 CDB[20]: 65 07:03:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1069.785967] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1069.803510] EXT4-fs (loop3): group descriptors corrupted! 07:03:53 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x700000000000000) 07:03:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1069.861255] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1069.868707] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1069.943393] device veth52 entered promiscuous mode [ 1069.946476] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1069.959305] IPv6: ADDRCONF(NETDEV_UP): veth52: link is not ready [ 1069.972039] EXT4-fs (loop3): group descriptors corrupted! 07:03:53 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:53 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1070.138499] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1070.170753] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 07:03:53 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 1070.289573] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 1070.314851] sd 0:0:1:0: [sg0] tag#4756 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1070.323788] sd 0:0:1:0: [sg0] tag#4756 CDB: opcode=0xfa (vendor) [ 1070.330032] sd 0:0:1:0: [sg0] tag#4756 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b 07:03:53 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x800000000000000) 07:03:53 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1070.338934] sd 0:0:1:0: [sg0] tag#4756 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1070.347795] sd 0:0:1:0: [sg0] tag#4756 CDB[20]: 65 [ 1070.373336] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:03:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1070.530774] device veth44 entered promiscuous mode [ 1070.559998] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 1070.589558] IPv6: ADDRCONF(NETDEV_UP): veth44: link is not ready 07:03:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1070.733628] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 1070.746359] sd 0:0:1:0: [sg0] tag#4795 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1070.755331] sd 0:0:1:0: [sg0] tag#4795 CDB: opcode=0xfa (vendor) [ 1070.761559] sd 0:0:1:0: [sg0] tag#4795 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1070.770454] sd 0:0:1:0: [sg0] tag#4795 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1070.779337] sd 0:0:1:0: [sg0] tag#4795 CDB[20]: 65 07:03:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1070.864541] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 1070.955392] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1070.963655] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 1071.021274] device veth52 entered promiscuous mode [ 1071.047231] IPv6: ADDRCONF(NETDEV_UP): veth52: link is not ready 07:03:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:54 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:03:54 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1071.168941] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 07:03:54 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:54 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xa00000000000000) [ 1071.283682] sd 0:0:1:0: [sg0] tag#4756 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1071.293370] sd 0:0:1:0: [sg0] tag#4756 CDB: opcode=0xfa (vendor) [ 1071.299742] sd 0:0:1:0: [sg0] tag#4756 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1071.308651] sd 0:0:1:0: [sg0] tag#4756 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1071.317509] sd 0:0:1:0: [sg0] tag#4756 CDB[20]: 65 [ 1071.328819] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 07:03:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1071.459647] device veth44 entered promiscuous mode 07:03:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1071.513286] IPv6: ADDRCONF(NETDEV_UP): veth44: link is not ready [ 1071.547353] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 07:03:55 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1071.603146] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1071.634816] sd 0:0:1:0: [sg0] tag#4795 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1071.643631] sd 0:0:1:0: [sg0] tag#4795 CDB: opcode=0xfa (vendor) 07:03:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1071.649886] sd 0:0:1:0: [sg0] tag#4795 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1071.658796] sd 0:0:1:0: [sg0] tag#4795 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1071.667654] sd 0:0:1:0: [sg0] tag#4795 CDB[20]: 65 07:03:55 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xc00000000000000) [ 1071.785644] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 07:03:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1071.942294] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 07:03:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029", 0x2d, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1072.027148] device veth52 entered promiscuous mode [ 1072.051637] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 1072.078775] IPv6: ADDRCONF(NETDEV_UP): veth52: link is not ready [ 1072.210429] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 07:03:55 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029", 0x2d, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:55 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xe00000000000000) 07:03:55 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:55 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x0, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1072.347179] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1072.358539] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 1072.373315] sd 0:0:1:0: [sg0] tag#4795 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1072.382150] sd 0:0:1:0: [sg0] tag#4795 CDB: opcode=0xfa (vendor) [ 1072.388419] sd 0:0:1:0: [sg0] tag#4795 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1072.397305] sd 0:0:1:0: [sg0] tag#4795 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1072.406220] sd 0:0:1:0: [sg0] tag#4795 CDB[20]: 65 07:03:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029", 0x2d, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:55 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xf00000000000000) [ 1072.531054] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 07:03:56 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x0, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1072.600225] device veth52 entered promiscuous mode 07:03:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f", 0x44, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1072.645426] IPv6: ADDRCONF(NETDEV_UP): veth52: link is not ready [ 1072.710464] device veth44 entered promiscuous mode [ 1072.724732] IPv6: ADDRCONF(NETDEV_UP): veth44: link is not ready [ 1072.764651] EXT4-fs error (device loop3): ext4_fill_super:4448: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1072.779609] sd 0:0:1:0: [sg0] tag#4795 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1072.788411] sd 0:0:1:0: [sg0] tag#4795 CDB: opcode=0xfa (vendor) [ 1072.794591] sd 0:0:1:0: [sg0] tag#4795 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1072.803656] sd 0:0:1:0: [sg0] tag#4795 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1072.812560] sd 0:0:1:0: [sg0] tag#4795 CDB[20]: 65 [ 1072.827557] EXT4-fs (loop3): get root inode failed [ 1072.836224] EXT4-fs (loop3): mount failed 07:03:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f", 0x44, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1072.955161] EXT4-fs error (device loop3): ext4_fill_super:4448: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1072.989061] EXT4-fs (loop3): get root inode failed [ 1072.994032] EXT4-fs (loop3): mount failed 07:03:56 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f", 0x44, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1073.137183] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1073.146039] nla_parse: 10 callbacks suppressed [ 1073.146057] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 07:03:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:03:56 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:56 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x1000000000000000) 07:03:56 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x0, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1073.277324] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1073.296888] EXT4-fs error (device loop3): ext4_fill_super:4448: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1073.317348] sd 0:0:1:0: [sg0] tag#4795 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1073.326261] sd 0:0:1:0: [sg0] tag#4795 CDB: opcode=0xfa (vendor) [ 1073.332494] sd 0:0:1:0: [sg0] tag#4795 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1073.341675] sd 0:0:1:0: [sg0] tag#4795 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1073.350756] sd 0:0:1:0: [sg0] tag#4795 CDB[20]: 65 [ 1073.377919] EXT4-fs (loop3): get root inode failed [ 1073.379752] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1073.382872] EXT4-fs (loop3): mount failed 07:03:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f0000000000000000010000", 0x4f, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1073.450859] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1073.476429] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1073.521832] EXT4-fs (loop3): invalid first ino: 0 [ 1073.586022] device veth44 entered promiscuous mode 07:03:57 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x2000000000000000) 07:03:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f0000000000000000010000", 0x4f, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1073.636366] IPv6: ADDRCONF(NETDEV_UP): veth44: link is not ready [ 1073.704091] sd 0:0:1:0: [sg0] tag#4795 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1073.712935] sd 0:0:1:0: [sg0] tag#4795 CDB: opcode=0xfa (vendor) [ 1073.719245] sd 0:0:1:0: [sg0] tag#4795 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1073.728209] sd 0:0:1:0: [sg0] tag#4795 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1073.737080] sd 0:0:1:0: [sg0] tag#4795 CDB[20]: 65 07:03:57 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x0, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1073.790322] EXT4-fs (loop3): invalid first ino: 0 [ 1073.811834] device veth52 entered promiscuous mode [ 1073.853878] IPv6: ADDRCONF(NETDEV_UP): veth52: link is not ready 07:03:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f0000000000000000010000", 0x4f, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1074.010946] EXT4-fs (loop3): invalid first ino: 0 [ 1074.219245] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1074.226808] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 07:03:57 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b", 0x55, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1074.265863] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 07:03:57 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:57 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x0, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:57 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x4800000000000000) [ 1074.370305] sd 0:0:1:0: [sg0] tag#4804 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1074.379078] sd 0:0:1:0: [sg0] tag#4804 CDB: opcode=0xfa (vendor) [ 1074.385260] sd 0:0:1:0: [sg0] tag#4804 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1074.394042] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1074.394186] sd 0:0:1:0: [sg0] tag#4804 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1074.411640] sd 0:0:1:0: [sg0] tag#4804 CDB[20]: 65 [ 1074.465477] EXT4-fs (loop3): unsupported inode size: 0 [ 1074.498329] EXT4-fs (loop3): blocksize: 1024 07:03:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b", 0x55, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1074.600333] device veth44 entered promiscuous mode [ 1074.670725] IPv6: ADDRCONF(NETDEV_UP): veth44: link is not ready [ 1074.707167] EXT4-fs (loop3): unsupported inode size: 0 07:03:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1074.727623] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1074.764635] EXT4-fs (loop3): blocksize: 1024 [ 1074.806574] sd 0:0:1:0: [sg0] tag#4756 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1074.815534] sd 0:0:1:0: [sg0] tag#4756 CDB: opcode=0xfa (vendor) [ 1074.821767] sd 0:0:1:0: [sg0] tag#4756 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1074.830663] sd 0:0:1:0: [sg0] tag#4756 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1074.839551] sd 0:0:1:0: [sg0] tag#4756 CDB[20]: 65 07:03:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b", 0x55, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1074.973962] EXT4-fs (loop3): unsupported inode size: 0 [ 1075.017159] EXT4-fs (loop3): blocksize: 1024 07:03:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b000000", 0x58, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:58 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x4c00000000000000) 07:03:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b000000", 0x58, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1075.110150] validate_nla: 1 callbacks suppressed [ 1075.110160] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1075.131606] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1075.132365] EXT4-fs (loop3): unsupported inode size: 0 [ 1075.153401] EXT4-fs (loop3): blocksize: 1024 [ 1075.202026] device veth52 entered promiscuous mode [ 1075.215215] EXT4-fs (loop3): unsupported inode size: 0 [ 1075.221938] EXT4-fs (loop3): blocksize: 1024 [ 1075.241100] IPv6: ADDRCONF(NETDEV_UP): veth52: link is not ready 07:03:58 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x0, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:58 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b000000", 0x58, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1075.404541] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1075.435725] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 07:03:58 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11bb}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1075.470871] EXT4-fs (loop3): unsupported inode size: 0 [ 1075.476464] EXT4-fs (loop3): blocksize: 1024 07:03:59 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:59 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x6000000000000000) 07:03:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b00000000", 0x59, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1075.628250] sd 0:0:1:0: [sg0] tag#4756 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1075.637117] sd 0:0:1:0: [sg0] tag#4756 CDB: opcode=0xfa (vendor) [ 1075.643424] sd 0:0:1:0: [sg0] tag#4756 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1075.652522] sd 0:0:1:0: [sg0] tag#4756 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1075.661430] sd 0:0:1:0: [sg0] tag#4756 CDB[20]: 65 [ 1075.694181] device veth44 entered promiscuous mode [ 1075.745484] IPv6: ADDRCONF(NETDEV_UP): veth44: link is not ready [ 1075.750204] EXT4-fs (loop3): unsupported inode size: 0 [ 1075.797943] EXT4-fs (loop3): blocksize: 1024 07:03:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b00000000", 0x59, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1075.903471] EXT4-fs (loop3): unsupported inode size: 0 [ 1075.922113] EXT4-fs (loop3): blocksize: 1024 07:03:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b00000000", 0x59, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:03:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:03:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1076.072246] EXT4-fs (loop3): unsupported inode size: 0 [ 1076.077531] EXT4-fs (loop3): blocksize: 1024 [ 1076.097025] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 07:03:59 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x6558000000000000) [ 1076.168503] sd 0:0:1:0: [sg0] tag#4756 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1076.177361] sd 0:0:1:0: [sg0] tag#4756 CDB: opcode=0xfa (vendor) [ 1076.183766] sd 0:0:1:0: [sg0] tag#4756 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1076.192663] sd 0:0:1:0: [sg0] tag#4756 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1076.201816] sd 0:0:1:0: [sg0] tag#4756 CDB[20]: 65 [ 1076.207274] device veth52 entered promiscuous mode [ 1076.217309] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 1076.237180] IPv6: ADDRCONF(NETDEV_UP): veth52: link is not ready 07:03:59 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1076.389965] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 07:03:59 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:03:59 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:03:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:03:59 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x6800000000000000) [ 1076.456695] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 07:04:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1076.580666] sd 0:0:1:0: [sg0] tag#4804 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1076.589515] sd 0:0:1:0: [sg0] tag#4804 CDB: opcode=0xfa (vendor) [ 1076.595699] sd 0:0:1:0: [sg0] tag#4804 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1076.604818] sd 0:0:1:0: [sg0] tag#4804 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1076.614564] sd 0:0:1:0: [sg0] tag#4804 CDB[20]: 65 [ 1076.636214] device veth44 entered promiscuous mode [ 1076.642469] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 1076.687257] IPv6: ADDRCONF(NETDEV_UP): veth44: link is not ready 07:04:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, 0x0) 07:04:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, 0x0) 07:04:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, 0x0) [ 1077.051877] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1077.130250] device veth52 entered promiscuous mode 07:04:00 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1077.156998] IPv6: ADDRCONF(NETDEV_UP): veth52: link is not ready 07:04:00 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:04:00 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x6c00000000000000) [ 1077.312367] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 07:04:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:04:00 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x0, 0x0, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:04:00 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1077.430596] sd 0:0:1:0: [sg0] tag#4804 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1077.439403] sd 0:0:1:0: [sg0] tag#4804 CDB: opcode=0xfa (vendor) [ 1077.445591] sd 0:0:1:0: [sg0] tag#4804 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1077.454672] sd 0:0:1:0: [sg0] tag#4804 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1077.463575] sd 0:0:1:0: [sg0] tag#4804 CDB[20]: 65 [ 1077.541780] device veth44 entered promiscuous mode [ 1077.573518] IPv6: ADDRCONF(NETDEV_UP): veth44: link is not ready [ 1077.605245] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 07:04:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5100}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:04:01 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x7400000000000000) 07:04:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300), 0x0, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1077.751550] sd 0:0:1:0: [sg0] tag#4756 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1077.760441] sd 0:0:1:0: [sg0] tag#4756 CDB: opcode=0xfa (vendor) [ 1077.766620] sd 0:0:1:0: [sg0] tag#4756 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1077.775576] sd 0:0:1:0: [sg0] tag#4756 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1077.784750] sd 0:0:1:0: [sg0] tag#4756 CDB[20]: 65 [ 1077.840631] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1077.876291] EXT4-fs (loop3): group descriptors corrupted! 07:04:01 executing program 3: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r3, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:04:01 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1078.019730] device veth52 entered promiscuous mode [ 1078.035055] IPv6: ADDRCONF(NETDEV_UP): veth52: link is not ready 07:04:01 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:04:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1078.169370] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1078.177255] nla_parse: 11 callbacks suppressed [ 1078.177259] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1078.207335] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 07:04:01 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x7727000000000000) [ 1078.281570] sd 0:0:1:0: [sg0] tag#4804 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1078.290440] sd 0:0:1:0: [sg0] tag#4804 CDB: opcode=0xfa (vendor) [ 1078.296618] sd 0:0:1:0: [sg0] tag#4804 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1078.305556] sd 0:0:1:0: [sg0] tag#4804 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1078.314474] sd 0:0:1:0: [sg0] tag#4804 CDB[20]: 65 [ 1078.337911] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:04:01 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:04:01 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x0, 0x0, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:04:01 executing program 3: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 1078.511340] device veth44 entered promiscuous mode [ 1078.568887] IPv6: ADDRCONF(NETDEV_UP): veth44: link is not ready 07:04:02 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x7a00000000000000) [ 1078.757369] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1078.765679] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1078.774816] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1078.792223] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 07:04:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1078.861396] device veth52 entered promiscuous mode [ 1078.875369] IPv6: ADDRCONF(NETDEV_UP): veth52: link is not ready [ 1078.920738] sd 0:0:1:0: [sg0] tag#4766 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1078.922613] device veth16 entered promiscuous mode [ 1078.929574] sd 0:0:1:0: [sg0] tag#4766 CDB: opcode=0xfa (vendor) [ 1078.940621] sd 0:0:1:0: [sg0] tag#4766 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1078.949567] sd 0:0:1:0: [sg0] tag#4766 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1078.958521] sd 0:0:1:0: [sg0] tag#4766 CDB[20]: 65 [ 1078.967426] IPv6: ADDRCONF(NETDEV_UP): veth16: link is not ready 07:04:02 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1079.280325] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1079.288941] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 07:04:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:04:02 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x0, 0x0, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:04:02 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:04:02 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x0, 0x0, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:04:02 executing program 3: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:04:02 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x8100000000000000) [ 1079.473549] sd 0:0:1:0: [sg0] tag#4765 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1079.483239] sd 0:0:1:0: [sg0] tag#4765 CDB: opcode=0xfa (vendor) [ 1079.489691] sd 0:0:1:0: [sg0] tag#4765 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1079.498600] sd 0:0:1:0: [sg0] tag#4765 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1079.507605] sd 0:0:1:0: [sg0] tag#4765 CDB[20]: 65 [ 1079.516560] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:04:03 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1079.655991] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1079.691780] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:04:03 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x88a8ffff00000000) 07:04:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1079.845329] device veth44 entered promiscuous mode [ 1079.854310] sd 0:0:1:0: [sg0] tag#4766 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1079.863717] sd 0:0:1:0: [sg0] tag#4766 CDB: opcode=0xfa (vendor) [ 1079.869950] sd 0:0:1:0: [sg0] tag#4766 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1079.878857] sd 0:0:1:0: [sg0] tag#4766 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1079.884015] IPv6: ADDRCONF(NETDEV_UP): veth44: link is not ready [ 1079.887756] sd 0:0:1:0: [sg0] tag#4766 CDB[20]: 65 [ 1079.987067] device veth52 entered promiscuous mode [ 1080.025511] IPv6: ADDRCONF(NETDEV_UP): veth52: link is not ready [ 1080.190848] device veth16 entered promiscuous mode [ 1080.205001] IPv6: ADDRCONF(NETDEV_UP): veth16: link is not ready 07:04:03 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x170, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x170}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1080.409188] validate_nla: 1 callbacks suppressed [ 1080.409197] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 07:04:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:04:03 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:04:04 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x9effffff00000000) 07:04:04 executing program 3: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:04:04 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x0, 0x0, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 1080.532188] sd 0:0:1:0: [sg0] tag#4766 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1080.541025] sd 0:0:1:0: [sg0] tag#4766 CDB: opcode=0xfa (vendor) [ 1080.547231] sd 0:0:1:0: [sg0] tag#4766 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1080.556183] sd 0:0:1:0: [sg0] tag#4766 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1080.565097] sd 0:0:1:0: [sg0] tag#4766 CDB[20]: 65 07:04:04 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x170, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x170}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1080.805304] device veth44 entered promiscuous mode 07:04:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb11}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1080.863501] IPv6: ADDRCONF(NETDEV_UP): veth44: link is not ready [ 1080.917079] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1080.945435] sd 0:0:1:0: [sg0] tag#4765 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1080.954299] sd 0:0:1:0: [sg0] tag#4765 CDB: opcode=0xfa (vendor) [ 1080.960596] sd 0:0:1:0: [sg0] tag#4765 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1080.969515] sd 0:0:1:0: [sg0] tag#4765 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1080.978457] sd 0:0:1:0: [sg0] tag#4765 CDB[20]: 65 [ 1081.011689] device veth52 entered promiscuous mode 07:04:04 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xc000000000000000) [ 1081.091439] IPv6: ADDRCONF(NETDEV_UP): veth52: link is not ready 07:04:04 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x170, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x170}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1081.450746] device veth16 entered promiscuous mode [ 1081.463580] IPv6: ADDRCONF(NETDEV_UP): veth16: link is not ready 07:04:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1081.593438] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 07:04:05 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:04:05 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x0, 0x0, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:04:05 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:04:05 executing program 3: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x100, 0x0) accept4$phonet_pipe(r2, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:04:05 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xc00e000000000000) [ 1081.763010] sd 0:0:1:0: [sg0] tag#4765 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1081.771965] sd 0:0:1:0: [sg0] tag#4765 CDB: opcode=0xfa (vendor) [ 1081.778179] sd 0:0:1:0: [sg0] tag#4765 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1081.787044] sd 0:0:1:0: [sg0] tag#4765 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1081.796023] sd 0:0:1:0: [sg0] tag#4765 CDB[20]: 65 [ 1081.932889] device veth52 entered promiscuous mode [ 1081.987650] IPv6: ADDRCONF(NETDEV_UP): veth52: link is not ready [ 1082.087517] device veth44 entered promiscuous mode [ 1082.145615] IPv6: ADDRCONF(NETDEV_UP): veth44: link is not ready 07:04:05 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1082.327369] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 07:04:05 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xe03f030000000000) 07:04:05 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x54}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:04:05 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:04:05 executing program 3 (fault-call:0 fault-nth:0): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1082.486744] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 07:04:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:04:06 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:04:06 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xeffdffff00000000) [ 1082.623058] FAULT_INJECTION: forcing a failure. [ 1082.623058] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.623934] sd 0:0:1:0: [sg0] tag#4765 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1082.643221] sd 0:0:1:0: [sg0] tag#4765 CDB: opcode=0xfa (vendor) [ 1082.649466] sd 0:0:1:0: [sg0] tag#4765 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1082.658420] sd 0:0:1:0: [sg0] tag#4765 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1082.667331] sd 0:0:1:0: [sg0] tag#4765 CDB[20]: 65 [ 1082.726150] CPU: 1 PID: 28366 Comm: syz-executor.3 Not tainted 4.19.163-syzkaller #0 [ 1082.734173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1082.743606] Call Trace: [ 1082.746194] dump_stack+0x1fc/0x2fe [ 1082.749825] should_fail.cold+0xa/0x14 [ 1082.753713] ? setup_fault_attr+0x200/0x200 [ 1082.758032] ? lock_acquire+0x170/0x3c0 [ 1082.762020] __should_failslab+0x115/0x180 [ 1082.766258] should_failslab+0x5/0xf [ 1082.769970] __kmalloc+0x2ab/0x3c0 [ 1082.773511] ? __se_sys_memfd_create+0xf8/0x440 [ 1082.778179] __se_sys_memfd_create+0xf8/0x440 [ 1082.782679] ? memfd_file_seals_ptr+0x150/0x150 [ 1082.787347] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1082.792707] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1082.797720] ? do_syscall_64+0x21/0x620 [ 1082.801725] do_syscall_64+0xf9/0x620 [ 1082.805529] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1082.810711] RIP: 0033:0x45e149 [ 1082.813918] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1082.832810] RSP: 002b:00007f7d235eca18 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1082.840511] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045e149 [ 1082.847774] RDX: 0000000020000260 RSI: 0000000000000000 RDI: 00000000004c2bc7 [ 1082.855038] RBP: 000000000007f800 R08: 0000000020000260 R09: 0000000000000000 [ 1082.862298] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000004 [ 1082.869557] R13: 00000000200005c0 R14: 0000000020000200 R15: 0000000020000180 07:04:06 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x170, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x170}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1082.980404] device veth52 entered promiscuous mode [ 1083.022913] IPv6: ADDRCONF(NETDEV_UP): veth52: link is not ready 07:04:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1083.133936] device veth44 entered promiscuous mode 07:04:06 executing program 3 (fault-call:0 fault-nth:1): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1083.184758] sd 0:0:1:0: [sg0] tag#4765 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1083.186637] IPv6: ADDRCONF(NETDEV_UP): veth44: link is not ready [ 1083.193582] sd 0:0:1:0: [sg0] tag#4765 CDB: opcode=0xfa (vendor) [ 1083.193631] sd 0:0:1:0: [sg0] tag#4765 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1083.214885] sd 0:0:1:0: [sg0] tag#4765 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1083.223799] sd 0:0:1:0: [sg0] tag#4765 CDB[20]: 65 [ 1083.253667] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1083.259782] FAULT_INJECTION: forcing a failure. [ 1083.259782] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.270095] nla_parse: 13 callbacks suppressed [ 1083.270101] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1083.276953] CPU: 0 PID: 28460 Comm: syz-executor.3 Not tainted 4.19.163-syzkaller #0 [ 1083.293206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1083.302557] Call Trace: [ 1083.305142] dump_stack+0x1fc/0x2fe [ 1083.308766] should_fail.cold+0xa/0x14 [ 1083.312663] ? setup_fault_attr+0x200/0x200 [ 1083.316978] ? lock_acquire+0x170/0x3c0 [ 1083.320955] __should_failslab+0x115/0x180 [ 1083.325188] should_failslab+0x5/0xf [ 1083.328886] kmem_cache_alloc+0x277/0x370 [ 1083.333029] ? shmem_destroy_callback+0xb0/0xb0 [ 1083.337691] shmem_alloc_inode+0x18/0x40 [ 1083.341748] ? shmem_destroy_callback+0xb0/0xb0 [ 1083.346412] alloc_inode+0x5d/0x180 [ 1083.350039] new_inode+0x1d/0xf0 [ 1083.353403] shmem_get_inode+0x96/0x8d0 [ 1083.357394] __shmem_file_setup.part.0+0x7a/0x2b0 [ 1083.362240] shmem_file_setup+0x61/0x90 [ 1083.366222] __se_sys_memfd_create+0x26b/0x440 [ 1083.370808] ? memfd_file_seals_ptr+0x150/0x150 [ 1083.375473] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1083.380835] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1083.385848] ? do_syscall_64+0x21/0x620 [ 1083.389826] do_syscall_64+0xf9/0x620 [ 1083.393623] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1083.398809] RIP: 0033:0x45e149 [ 1083.402016] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1083.420906] RSP: 002b:00007f7d235eca18 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1083.428597] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045e149 [ 1083.435858] RDX: 0000000020000260 RSI: 0000000000000000 RDI: 00000000004c2bc7 [ 1083.443104] RBP: 000000000007f800 R08: 0000000020000260 R09: 0000000000000000 07:04:06 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xf0ffffff00000000) 07:04:06 executing program 3 (fault-call:0 fault-nth:2): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1083.450354] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000004 [ 1083.457611] R13: 00000000200005c0 R14: 0000000020000200 R15: 0000000020000180 [ 1083.529796] FAULT_INJECTION: forcing a failure. [ 1083.529796] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.541767] CPU: 0 PID: 28474 Comm: syz-executor.3 Not tainted 4.19.163-syzkaller #0 [ 1083.549780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1083.559127] Call Trace: [ 1083.561819] dump_stack+0x1fc/0x2fe [ 1083.565464] should_fail.cold+0xa/0x14 [ 1083.569347] ? setup_fault_attr+0x200/0x200 [ 1083.573663] ? lock_acquire+0x170/0x3c0 [ 1083.577639] __should_failslab+0x115/0x180 [ 1083.581868] should_failslab+0x5/0xf [ 1083.585573] kmem_cache_alloc+0x277/0x370 [ 1083.589727] __d_alloc+0x2b/0xa10 [ 1083.593177] d_alloc_pseudo+0x19/0x70 [ 1083.596973] alloc_file_pseudo+0xc6/0x250 [ 1083.601114] ? alloc_file+0x4d0/0x4d0 [ 1083.604908] ? lockdep_annotate_inode_mutex_key+0x43/0x130 [ 1083.610519] ? shmem_get_inode+0x44c/0x8d0 [ 1083.614746] __shmem_file_setup.part.0+0x102/0x2b0 [ 1083.619668] shmem_file_setup+0x61/0x90 [ 1083.623643] __se_sys_memfd_create+0x26b/0x440 [ 1083.628218] ? memfd_file_seals_ptr+0x150/0x150 [ 1083.632872] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1083.638241] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1083.643242] ? do_syscall_64+0x21/0x620 [ 1083.647193] do_syscall_64+0xf9/0x620 [ 1083.651089] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1083.656253] RIP: 0033:0x45e149 [ 1083.659434] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 07:04:07 executing program 3 (fault-call:0 fault-nth:3): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1083.678325] RSP: 002b:00007f7d235eca18 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1083.686035] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045e149 [ 1083.693301] RDX: 0000000020000260 RSI: 0000000000000000 RDI: 00000000004c2bc7 [ 1083.700552] RBP: 000000000007f800 R08: 0000000020000260 R09: 0000000000000000 [ 1083.707804] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000004 [ 1083.715050] R13: 00000000200005c0 R14: 0000000020000200 R15: 0000000020000180 [ 1083.802293] FAULT_INJECTION: forcing a failure. [ 1083.802293] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.816436] CPU: 1 PID: 28490 Comm: syz-executor.3 Not tainted 4.19.163-syzkaller #0 [ 1083.824319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1083.833748] Call Trace: [ 1083.836331] dump_stack+0x1fc/0x2fe [ 1083.839958] should_fail.cold+0xa/0x14 [ 1083.843839] ? setup_fault_attr+0x200/0x200 [ 1083.848153] ? lock_acquire+0x170/0x3c0 [ 1083.852146] __should_failslab+0x115/0x180 [ 1083.856467] should_failslab+0x5/0xf [ 1083.860177] kmem_cache_alloc+0x277/0x370 [ 1083.864315] __alloc_file+0x21/0x330 [ 1083.868071] alloc_empty_file+0x6d/0x170 [ 1083.872117] alloc_file+0x5e/0x4d0 [ 1083.875634] alloc_file_pseudo+0x165/0x250 [ 1083.879843] ? alloc_file+0x4d0/0x4d0 [ 1083.883618] ? lockdep_annotate_inode_mutex_key+0x43/0x130 [ 1083.889217] ? shmem_get_inode+0x44c/0x8d0 [ 1083.893430] __shmem_file_setup.part.0+0x102/0x2b0 [ 1083.898334] shmem_file_setup+0x61/0x90 [ 1083.902319] __se_sys_memfd_create+0x26b/0x440 [ 1083.906877] ? memfd_file_seals_ptr+0x150/0x150 [ 1083.911544] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1083.916882] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1083.921875] ? do_syscall_64+0x21/0x620 [ 1083.925826] do_syscall_64+0xf9/0x620 [ 1083.929601] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1083.934770] RIP: 0033:0x45e149 [ 1083.938033] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1083.957016] RSP: 002b:00007f7d235eca18 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1083.964707] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045e149 [ 1083.972111] RDX: 0000000020000260 RSI: 0000000000000000 RDI: 00000000004c2bc7 [ 1083.979357] RBP: 000000000007f800 R08: 0000000020000260 R09: 0000000000000000 [ 1083.986600] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000004 [ 1083.993846] R13: 00000000200005c0 R14: 0000000020000200 R15: 0000000020000180 [ 1084.002049] sd 0:0:1:0: [sg0] tag#4765 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1084.010912] sd 0:0:1:0: [sg0] tag#4765 CDB: opcode=0xfa (vendor) [ 1084.017085] sd 0:0:1:0: [sg0] tag#4765 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1084.026217] sd 0:0:1:0: [sg0] tag#4765 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1084.035115] sd 0:0:1:0: [sg0] tag#4765 CDB[20]: 65 [ 1084.078827] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1084.106992] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 07:04:07 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x54}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:04:07 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x170, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x170}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:04:07 executing program 3 (fault-call:0 fault-nth:4): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:04:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:04:07 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:04:07 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xfeff000000000000) [ 1084.236626] sd 0:0:1:0: [sg0] tag#4766 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1084.242403] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1084.245434] sd 0:0:1:0: [sg0] tag#4766 CDB: opcode=0xfa (vendor) [ 1084.260294] sd 0:0:1:0: [sg0] tag#4766 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1084.269329] sd 0:0:1:0: [sg0] tag#4766 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1084.278251] sd 0:0:1:0: [sg0] tag#4766 CDB[20]: 65 [ 1084.308651] FAULT_INJECTION: forcing a failure. [ 1084.308651] name failslab, interval 1, probability 0, space 0, times 0 [ 1084.376743] CPU: 1 PID: 28541 Comm: syz-executor.3 Not tainted 4.19.163-syzkaller #0 [ 1084.384738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1084.394083] Call Trace: [ 1084.396670] dump_stack+0x1fc/0x2fe [ 1084.400301] should_fail.cold+0xa/0x14 [ 1084.404192] ? setup_fault_attr+0x200/0x200 [ 1084.408514] ? lock_acquire+0x170/0x3c0 [ 1084.412502] __should_failslab+0x115/0x180 [ 1084.416740] should_failslab+0x5/0xf [ 1084.420448] kmem_cache_alloc_trace+0x284/0x380 07:04:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1084.425239] apparmor_file_alloc_security+0x394/0xad0 [ 1084.430431] ? apparmor_file_receive+0x160/0x160 [ 1084.435189] ? __alloc_file+0x21/0x330 [ 1084.439083] security_file_alloc+0x40/0x90 [ 1084.443318] __alloc_file+0xc9/0x330 [ 1084.447030] alloc_empty_file+0x6d/0x170 [ 1084.451086] alloc_file+0x5e/0x4d0 [ 1084.454625] alloc_file_pseudo+0x165/0x250 [ 1084.458868] ? alloc_file+0x4d0/0x4d0 [ 1084.462670] ? lockdep_annotate_inode_mutex_key+0x43/0x130 [ 1084.468298] ? shmem_get_inode+0x44c/0x8d0 [ 1084.472538] __shmem_file_setup.part.0+0x102/0x2b0 [ 1084.477480] shmem_file_setup+0x61/0x90 [ 1084.481475] __se_sys_memfd_create+0x26b/0x440 [ 1084.486102] ? memfd_file_seals_ptr+0x150/0x150 [ 1084.490778] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1084.496147] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1084.501167] ? do_syscall_64+0x21/0x620 [ 1084.505147] do_syscall_64+0xf9/0x620 [ 1084.507467] sd 0:0:1:0: [sg0] tag#4765 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1084.508942] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1084.508953] RIP: 0033:0x45e149 [ 1084.508963] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1084.508973] RSP: 002b:00007f7d235eca18 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1084.517679] sd 0:0:1:0: [sg0] tag#4765 CDB: opcode=0xfa (vendor) [ 1084.522802] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045e149 [ 1084.526026] sd 0:0:1:0: [sg0] tag#4765 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1084.544941] RDX: 0000000020000260 RSI: 0000000000000000 RDI: 00000000004c2bc7 [ 1084.544950] RBP: 000000000007f800 R08: 0000000020000260 R09: 0000000000000000 [ 1084.544957] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000004 [ 1084.544964] R13: 00000000200005c0 R14: 0000000020000200 R15: 0000000020000180 [ 1084.604426] sd 0:0:1:0: [sg0] tag#4765 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1084.613521] sd 0:0:1:0: [sg0] tag#4765 CDB[20]: 65 07:04:08 executing program 3 (fault-call:0 fault-nth:5): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1084.641107] device veth44 entered promiscuous mode [ 1084.682969] FAULT_INJECTION: forcing a failure. [ 1084.682969] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1084.716148] CPU: 0 PID: 28582 Comm: syz-executor.3 Not tainted 4.19.163-syzkaller #0 [ 1084.724135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1084.733478] Call Trace: [ 1084.736060] dump_stack+0x1fc/0x2fe [ 1084.739689] should_fail.cold+0xa/0x14 [ 1084.743576] ? lock_acquire+0x170/0x3c0 [ 1084.746534] IPv6: ADDRCONF(NETDEV_UP): veth44: link is not ready [ 1084.747544] ? setup_fault_attr+0x200/0x200 [ 1084.747591] __alloc_pages_nodemask+0x239/0x2890 [ 1084.747603] ? __lock_acquire+0x6de/0x3ff0 [ 1084.747623] ? static_obj+0x50/0x50 [ 1084.747640] ? __lock_acquire+0x6de/0x3ff0 [ 1084.747679] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1084.747692] ? __lock_acquire+0x6de/0x3ff0 [ 1084.770357] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1084.770693] ? deref_stack_reg+0x134/0x1d0 [ 1084.770709] ? mark_held_locks+0xf0/0xf0 [ 1084.770723] ? mark_held_locks+0xf0/0xf0 [ 1084.804822] ? unwind_next_frame+0x10a9/0x1c60 [ 1084.809505] alloc_pages_vma+0xf2/0x780 [ 1084.813481] shmem_alloc_page+0x11c/0x1f0 [ 1084.817633] ? shmem_swapin+0x220/0x220 [ 1084.821628] ? percpu_counter_add_batch+0x126/0x180 [ 1084.826660] ? __vm_enough_memory+0x316/0x650 [ 1084.831157] shmem_alloc_and_acct_page+0x15a/0x850 [ 1084.836174] shmem_getpage_gfp+0x4e9/0x37f0 [ 1084.840501] ? shmem_alloc_and_acct_page+0x850/0x850 [ 1084.845595] ? mark_held_locks+0xa6/0xf0 [ 1084.849656] ? ktime_get_coarse_real_ts64+0x1c7/0x290 [ 1084.854844] ? iov_iter_fault_in_readable+0x1fc/0x3f0 [ 1084.860042] shmem_write_begin+0xff/0x1e0 [ 1084.864192] generic_perform_write+0x1f8/0x4d0 [ 1084.868775] ? filemap_page_mkwrite+0x2f0/0x2f0 [ 1084.873438] ? current_time+0x1c0/0x1c0 [ 1084.877408] ? lock_acquire+0x170/0x3c0 [ 1084.881384] __generic_file_write_iter+0x24b/0x610 [ 1084.886437] generic_file_write_iter+0x3f8/0x729 [ 1084.891198] __vfs_write+0x51b/0x770 [ 1084.894909] ? kernel_read+0x110/0x110 [ 1084.898797] ? check_preemption_disabled+0x41/0x280 [ 1084.903813] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1084.908830] vfs_write+0x1f3/0x540 [ 1084.912369] __x64_sys_pwrite64+0x1f7/0x250 [ 1084.916687] ? ksys_pwrite64+0x1a0/0x1a0 [ 1084.920749] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1084.925752] ? do_syscall_64+0x21/0x620 [ 1084.929716] do_syscall_64+0xf9/0x620 [ 1084.933509] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1084.938684] RIP: 0033:0x417ca7 [ 1084.941885] Code: 12 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 a1 18 00 00 c3 48 83 ec 08 e8 07 fa ff ff 48 89 04 24 49 89 ca b8 12 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 4d fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1084.960777] RSP: 002b:00007f7d235eca10 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1084.968474] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000417ca7 [ 1084.975726] RDX: 000000000000005a RSI: 0000000020010000 RDI: 0000000000000004 [ 1084.982975] RBP: 0000000000000000 R08: 0000000020000260 R09: 0000000000000000 [ 1084.990226] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 1084.997478] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000020000210 [ 1085.010585] sd 0:0:1:0: [sg0] tag#4765 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1085.019452] sd 0:0:1:0: [sg0] tag#4765 CDB: opcode=0xfa (vendor) [ 1085.025636] sd 0:0:1:0: [sg0] tag#4765 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b 07:04:08 executing program 3 (fault-call:0 fault-nth:6): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1085.034553] sd 0:0:1:0: [sg0] tag#4765 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1085.043454] sd 0:0:1:0: [sg0] tag#4765 CDB[20]: 65 [ 1085.055939] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 1085.114470] FAULT_INJECTION: forcing a failure. [ 1085.114470] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1085.131880] CPU: 1 PID: 28607 Comm: syz-executor.3 Not tainted 4.19.163-syzkaller #0 [ 1085.139768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1085.149111] Call Trace: [ 1085.151700] dump_stack+0x1fc/0x2fe [ 1085.155332] should_fail.cold+0xa/0x14 [ 1085.159243] ? lock_acquire+0x170/0x3c0 [ 1085.163209] ? setup_fault_attr+0x200/0x200 [ 1085.167531] __alloc_pages_nodemask+0x239/0x2890 [ 1085.172287] ? __lock_acquire+0x6de/0x3ff0 [ 1085.176523] ? __lock_acquire+0x6de/0x3ff0 [ 1085.180751] ? __lock_acquire+0x6de/0x3ff0 [ 1085.184977] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1085.189802] ? __lock_acquire+0x6de/0x3ff0 [ 1085.194026] ? static_obj+0x50/0x50 [ 1085.197650] ? mark_held_locks+0xf0/0xf0 [ 1085.201704] alloc_pages_vma+0xf2/0x780 [ 1085.205656] shmem_alloc_page+0x11c/0x1f0 [ 1085.209777] ? shmem_swapin+0x220/0x220 [ 1085.213762] ? percpu_counter_add_batch+0x126/0x180 [ 1085.218756] ? __vm_enough_memory+0x316/0x650 [ 1085.223229] shmem_alloc_and_acct_page+0x15a/0x850 [ 1085.228142] shmem_getpage_gfp+0x4e9/0x37f0 [ 1085.232444] ? shmem_alloc_and_acct_page+0x850/0x850 [ 1085.237522] ? mark_held_locks+0xa6/0xf0 [ 1085.241566] ? ktime_get_coarse_real_ts64+0x1c7/0x290 [ 1085.246752] ? iov_iter_fault_in_readable+0x1fc/0x3f0 [ 1085.251927] shmem_write_begin+0xff/0x1e0 [ 1085.256060] generic_perform_write+0x1f8/0x4d0 [ 1085.260618] ? filemap_page_mkwrite+0x2f0/0x2f0 [ 1085.265296] ? current_time+0x1c0/0x1c0 [ 1085.269244] ? lock_acquire+0x170/0x3c0 [ 1085.273194] __generic_file_write_iter+0x24b/0x610 [ 1085.278099] generic_file_write_iter+0x3f8/0x729 [ 1085.282833] __vfs_write+0x51b/0x770 [ 1085.286563] ? kernel_read+0x110/0x110 [ 1085.290446] ? check_preemption_disabled+0x41/0x280 [ 1085.295439] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1085.300430] vfs_write+0x1f3/0x540 [ 1085.303952] __x64_sys_pwrite64+0x1f7/0x250 [ 1085.308368] ? ksys_pwrite64+0x1a0/0x1a0 [ 1085.312408] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1085.317404] ? do_syscall_64+0x21/0x620 [ 1085.321355] do_syscall_64+0xf9/0x620 [ 1085.325149] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1085.330315] RIP: 0033:0x417ca7 [ 1085.333484] Code: 12 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 a1 18 00 00 c3 48 83 ec 08 e8 07 fa ff ff 48 89 04 24 49 89 ca b8 12 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 4d fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1085.352407] RSP: 002b:00007f7d235eca10 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1085.360106] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000417ca7 [ 1085.367349] RDX: 000000000000001d RSI: 0000000020010d00 RDI: 0000000000000004 [ 1085.374593] RBP: 0000000000000000 R08: 0000000020000260 R09: 0000000000000000 [ 1085.381837] R10: 0000000000001800 R11: 0000000000000293 R12: 0000000000000004 [ 1085.389083] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000020000240 [ 1085.407674] EXT4-fs error (device loop3): ext4_fill_super:4448: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1085.421341] EXT4-fs (loop3): get root inode failed [ 1085.426355] EXT4-fs (loop3): mount failed 07:04:08 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x170, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x170}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:04:08 executing program 3 (fault-call:0 fault-nth:7): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1085.456203] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1085.464108] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 07:04:09 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xff03000000000000) [ 1085.530053] FAULT_INJECTION: forcing a failure. [ 1085.530053] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.541934] CPU: 0 PID: 28634 Comm: syz-executor.3 Not tainted 4.19.163-syzkaller #0 [ 1085.549820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1085.559164] Call Trace: [ 1085.561775] dump_stack+0x1fc/0x2fe [ 1085.565412] should_fail.cold+0xa/0x14 [ 1085.569403] ? setup_fault_attr+0x200/0x200 [ 1085.573718] ? __lock_acquire+0x6de/0x3ff0 [ 1085.578069] __should_failslab+0x115/0x180 [ 1085.582293] should_failslab+0x5/0xf [ 1085.585994] kmem_cache_alloc+0x3f/0x370 [ 1085.590156] radix_tree_node_alloc.constprop.0+0x1e4/0x320 [ 1085.595769] radix_tree_extend+0x191/0x4b0 [ 1085.599984] __radix_tree_create+0x448/0x540 [ 1085.604384] __radix_tree_insert+0xbb/0x5f0 [ 1085.608701] ? __radix_tree_create+0x540/0x540 [ 1085.613269] ? lock_acquire+0x170/0x3c0 [ 1085.617226] ? shmem_add_to_page_cache+0x306/0xbb0 [ 1085.622155] shmem_add_to_page_cache+0x616/0xbb0 [ 1085.626898] ? shmem_recalc_inode+0x310/0x310 [ 1085.631375] ? __radix_tree_preload+0x1fe/0x280 [ 1085.636028] shmem_getpage_gfp+0x2004/0x37f0 [ 1085.640422] ? shmem_alloc_and_acct_page+0x850/0x850 [ 1085.645506] ? mark_held_locks+0xa6/0xf0 [ 1085.649558] ? ktime_get_coarse_real_ts64+0x1c7/0x290 [ 1085.654737] ? iov_iter_fault_in_readable+0x1fc/0x3f0 [ 1085.659913] shmem_write_begin+0xff/0x1e0 [ 1085.664049] generic_perform_write+0x1f8/0x4d0 [ 1085.668622] ? filemap_page_mkwrite+0x2f0/0x2f0 [ 1085.673278] ? current_time+0x1c0/0x1c0 [ 1085.677244] ? lock_acquire+0x170/0x3c0 [ 1085.681214] __generic_file_write_iter+0x24b/0x610 [ 1085.686123] generic_file_write_iter+0x3f8/0x729 [ 1085.690863] __vfs_write+0x51b/0x770 [ 1085.694557] ? kernel_read+0x110/0x110 [ 1085.698426] ? check_preemption_disabled+0x41/0x280 [ 1085.703459] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1085.708469] vfs_write+0x1f3/0x540 [ 1085.712000] __x64_sys_pwrite64+0x1f7/0x250 [ 1085.716305] ? ksys_pwrite64+0x1a0/0x1a0 [ 1085.720346] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1085.725340] ? do_syscall_64+0x21/0x620 [ 1085.729303] do_syscall_64+0xf9/0x620 [ 1085.733091] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1085.738260] RIP: 0033:0x417ca7 [ 1085.741429] Code: 12 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 a1 18 00 00 c3 48 83 ec 08 e8 07 fa ff ff 48 89 04 24 49 89 ca b8 12 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 4d fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1085.760306] RSP: 002b:00007f7d235eca10 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1085.767996] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000417ca7 [ 1085.775467] RDX: 000000000000001d RSI: 0000000020010d00 RDI: 0000000000000004 [ 1085.782715] RBP: 0000000000000000 R08: 0000000020000260 R09: 0000000000000000 [ 1085.789968] R10: 0000000000001800 R11: 0000000000000293 R12: 0000000000000004 [ 1085.797225] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000020000240 [ 1085.809710] device veth52 entered promiscuous mode [ 1085.826814] IPv6: ADDRCONF(NETDEV_UP): veth52: link is not ready [ 1085.844661] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1085.977471] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1085.999257] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 07:04:09 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x54}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:04:09 executing program 3 (fault-call:0 fault-nth:8): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:04:09 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:04:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:04:09 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:04:09 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xff0f000000000000) [ 1086.083882] FAULT_INJECTION: forcing a failure. [ 1086.083882] name failslab, interval 1, probability 0, space 0, times 0 [ 1086.113305] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1086.146452] sd 0:0:1:0: [sg0] tag#4765 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1086.155317] sd 0:0:1:0: [sg0] tag#4765 CDB: opcode=0xfa (vendor) [ 1086.161707] sd 0:0:1:0: [sg0] tag#4765 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1086.170601] sd 0:0:1:0: [sg0] tag#4765 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1086.179594] sd 0:0:1:0: [sg0] tag#4765 CDB[20]: 65 [ 1086.194807] CPU: 0 PID: 28683 Comm: syz-executor.3 Not tainted 4.19.163-syzkaller #0 [ 1086.202702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1086.212045] Call Trace: [ 1086.214632] dump_stack+0x1fc/0x2fe [ 1086.218264] should_fail.cold+0xa/0x14 [ 1086.222153] ? setup_fault_attr+0x200/0x200 [ 1086.226473] ? lock_acquire+0x170/0x3c0 [ 1086.230448] __should_failslab+0x115/0x180 [ 1086.234789] should_failslab+0x5/0xf [ 1086.238500] kmem_cache_alloc+0x277/0x370 [ 1086.242654] getname_flags+0xce/0x590 [ 1086.246459] do_sys_open+0x26c/0x520 [ 1086.250173] ? filp_open+0x70/0x70 [ 1086.253711] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1086.259081] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1086.264097] ? do_syscall_64+0x21/0x620 [ 1086.268068] do_syscall_64+0xf9/0x620 [ 1086.271867] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1086.277039] RIP: 0033:0x417c41 [ 1086.280224] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 6a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1086.299119] RSP: 002b:00007f7d235eca10 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1086.306825] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000417c41 [ 1086.314104] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f7d235ecad0 [ 1086.321366] RBP: 0000000000000000 R08: 0000000020000260 R09: 0000000000000000 [ 1086.328629] R10: 000000000003fc00 R11: 0000000000000293 R12: 0000000000000004 [ 1086.335890] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000020000270 [ 1086.389094] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:04:09 executing program 3 (fault-call:0 fault-nth:9): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1086.464274] device veth44 entered promiscuous mode [ 1086.501367] FAULT_INJECTION: forcing a failure. [ 1086.501367] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1086.504192] IPv6: ADDRCONF(NETDEV_UP): veth44: link is not ready [ 1086.513265] CPU: 1 PID: 28743 Comm: syz-executor.3 Not tainted 4.19.163-syzkaller #0 [ 1086.513273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1086.513277] Call Trace: [ 1086.513295] dump_stack+0x1fc/0x2fe [ 1086.513315] should_fail.cold+0xa/0x14 [ 1086.513348] ? setup_fault_attr+0x200/0x200 [ 1086.513361] ? do_writepages+0x290/0x290 [ 1086.513375] ? unlock_page+0x13d/0x230 [ 1086.513392] __alloc_pages_nodemask+0x239/0x2890 [ 1086.525510] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1086.527405] ? lock_downgrade+0x720/0x720 [ 1086.527418] ? check_preemption_disabled+0x41/0x280 [ 1086.527434] ? __lock_acquire+0x6de/0x3ff0 [ 1086.527460] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1086.527472] ? lock_downgrade+0x720/0x720 [ 1086.527482] ? lock_acquire+0x170/0x3c0 [ 1086.527499] ? up_write+0x18/0x150 07:04:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:04:10 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xffffff7f00000000) [ 1086.527511] ? generic_file_write_iter+0x381/0x729 [ 1086.527526] ? iov_iter_init+0xb8/0x1d0 [ 1086.527543] cache_grow_begin+0xa4/0x8a0 [ 1086.527557] ? setup_fault_attr+0x200/0x200 [ 1086.527568] ? lock_acquire+0x170/0x3c0 [ 1086.527582] cache_alloc_refill+0x273/0x340 [ 1086.527598] kmem_cache_alloc+0x346/0x370 [ 1086.527615] getname_flags+0xce/0x590 [ 1086.527630] do_sys_open+0x26c/0x520 [ 1086.527644] ? filp_open+0x70/0x70 [ 1086.537500] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1086.539589] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1086.539606] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1086.539622] ? do_syscall_64+0x21/0x620 [ 1086.539638] do_syscall_64+0xf9/0x620 [ 1086.539658] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1086.637441] sd 0:0:1:0: [sg0] tag#4765 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1086.638492] RIP: 0033:0x417c41 [ 1086.638506] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 6a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1086.638513] RSP: 002b:00007f7d235eca10 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1086.638525] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000417c41 [ 1086.638532] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f7d235ecad0 [ 1086.638540] RBP: 0000000000000000 R08: 0000000020000260 R09: 0000000000000000 [ 1086.638546] R10: 000000000003fc00 R11: 0000000000000293 R12: 0000000000000004 [ 1086.638558] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000020000270 07:04:10 executing program 3 (fault-call:0 fault-nth:10): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1086.642115] sd 0:0:1:0: [sg0] tag#4765 CDB: opcode=0xfa (vendor) [ 1086.722607] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1086.728129] sd 0:0:1:0: [sg0] tag#4765 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1086.728160] sd 0:0:1:0: [sg0] tag#4765 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1086.783299] sd 0:0:1:0: [sg0] tag#4765 CDB[20]: 65 [ 1086.886918] FAULT_INJECTION: forcing a failure. [ 1086.886918] name failslab, interval 1, probability 0, space 0, times 0 [ 1086.912867] CPU: 0 PID: 28762 Comm: syz-executor.3 Not tainted 4.19.163-syzkaller #0 [ 1086.920751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1086.930081] Call Trace: [ 1086.932648] dump_stack+0x1fc/0x2fe [ 1086.936258] should_fail.cold+0xa/0x14 [ 1086.940138] ? setup_fault_attr+0x200/0x200 [ 1086.944455] ? lock_acquire+0x170/0x3c0 [ 1086.948431] __should_failslab+0x115/0x180 [ 1086.952659] should_failslab+0x5/0xf [ 1086.956373] kmem_cache_alloc_trace+0x284/0x380 [ 1086.961137] apparmor_file_alloc_security+0x394/0xad0 [ 1086.966328] ? apparmor_file_receive+0x160/0x160 [ 1086.971082] ? __alloc_file+0x21/0x330 [ 1086.974975] security_file_alloc+0x40/0x90 [ 1086.979206] __alloc_file+0xc9/0x330 [ 1086.982921] alloc_empty_file+0x6d/0x170 [ 1086.986973] path_openat+0xe9/0x2df0 [ 1086.990677] ? __lock_acquire+0x6de/0x3ff0 [ 1086.994901] ? path_lookupat+0x8d0/0x8d0 [ 1086.998950] ? mark_held_locks+0xf0/0xf0 [ 1087.003004] ? mark_held_locks+0xf0/0xf0 [ 1087.007070] do_filp_open+0x18c/0x3f0 [ 1087.010871] ? may_open_dev+0xf0/0xf0 [ 1087.014660] ? __alloc_fd+0x28d/0x570 [ 1087.018449] ? lock_downgrade+0x720/0x720 [ 1087.022588] ? lock_acquire+0x170/0x3c0 [ 1087.026554] ? __alloc_fd+0x34/0x570 [ 1087.030255] ? do_raw_spin_unlock+0x171/0x230 [ 1087.034740] ? _raw_spin_unlock+0x29/0x40 [ 1087.038882] ? __alloc_fd+0x28d/0x570 [ 1087.042673] do_sys_open+0x3b3/0x520 [ 1087.046368] ? filp_open+0x70/0x70 [ 1087.049897] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1087.055374] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1087.060382] ? do_syscall_64+0x21/0x620 [ 1087.064351] do_syscall_64+0xf9/0x620 [ 1087.068141] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1087.073322] RIP: 0033:0x417c41 [ 1087.076498] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 6a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1087.095375] RSP: 002b:00007f7d235eca10 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1087.103060] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000417c41 [ 1087.110321] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f7d235ecad0 [ 1087.117583] RBP: 0000000000000000 R08: 0000000020000260 R09: 0000000000000000 [ 1087.124846] R10: 000000000003fc00 R11: 0000000000000293 R12: 0000000000000004 07:04:10 executing program 3 (fault-call:0 fault-nth:11): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1087.132104] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000020000270 07:04:10 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1087.202696] FAULT_INJECTION: forcing a failure. [ 1087.202696] name failslab, interval 1, probability 0, space 0, times 0 [ 1087.215266] CPU: 0 PID: 28780 Comm: syz-executor.3 Not tainted 4.19.163-syzkaller #0 [ 1087.223147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1087.232480] Call Trace: [ 1087.235046] dump_stack+0x1fc/0x2fe [ 1087.238668] should_fail.cold+0xa/0x14 [ 1087.242546] ? setup_fault_attr+0x200/0x200 [ 1087.246858] ? lock_acquire+0x170/0x3c0 [ 1087.250843] __should_failslab+0x115/0x180 [ 1087.255070] should_failslab+0x5/0xf [ 1087.258856] kmem_cache_alloc_trace+0x284/0x380 [ 1087.263530] apparmor_file_alloc_security+0x394/0xad0 [ 1087.268740] ? apparmor_file_receive+0x160/0x160 [ 1087.273494] ? __alloc_file+0x21/0x330 [ 1087.277385] security_file_alloc+0x40/0x90 [ 1087.281614] __alloc_file+0xc9/0x330 [ 1087.285309] alloc_empty_file+0x6d/0x170 [ 1087.289358] path_openat+0xe9/0x2df0 [ 1087.293059] ? __lock_acquire+0x6de/0x3ff0 [ 1087.297293] ? path_lookupat+0x8d0/0x8d0 [ 1087.301340] ? mark_held_locks+0xf0/0xf0 [ 1087.305385] do_filp_open+0x18c/0x3f0 [ 1087.309172] ? may_open_dev+0xf0/0xf0 [ 1087.312960] ? __alloc_fd+0x28d/0x570 [ 1087.316753] ? lock_downgrade+0x720/0x720 [ 1087.320886] ? lock_acquire+0x170/0x3c0 [ 1087.324839] ? __alloc_fd+0x34/0x570 [ 1087.328554] ? do_raw_spin_unlock+0x171/0x230 [ 1087.333041] ? _raw_spin_unlock+0x29/0x40 [ 1087.337176] ? __alloc_fd+0x28d/0x570 [ 1087.340968] do_sys_open+0x3b3/0x520 [ 1087.344664] ? filp_open+0x70/0x70 [ 1087.348195] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1087.353553] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1087.358567] ? do_syscall_64+0x21/0x620 [ 1087.362551] do_syscall_64+0xf9/0x620 [ 1087.366339] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1087.371516] RIP: 0033:0x417c41 [ 1087.374694] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 6a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1087.393574] RSP: 002b:00007f7d235eca10 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1087.401261] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000417c41 [ 1087.408517] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f7d235ecad0 [ 1087.415792] RBP: 0000000000000000 R08: 0000000020000260 R09: 0000000000000000 [ 1087.423048] R10: 000000000003fc00 R11: 0000000000000293 R12: 0000000000000004 [ 1087.430306] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000020000270 [ 1087.439424] sd 0:0:1:0: [sg0] tag#4766 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1087.448452] sd 0:0:1:0: [sg0] tag#4766 CDB: opcode=0xfa (vendor) [ 1087.454642] sd 0:0:1:0: [sg0] tag#4766 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1087.463953] sd 0:0:1:0: [sg0] tag#4766 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1087.472851] sd 0:0:1:0: [sg0] tag#4766 CDB[20]: 65 [ 1087.519668] device veth52 entered promiscuous mode [ 1087.533509] IPv6: ADDRCONF(NETDEV_UP): veth52: link is not ready [ 1087.675937] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1087.687270] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1087.709038] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 07:04:11 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:04:11 executing program 3 (fault-call:0 fault-nth:12): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:04:11 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:04:11 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:04:11 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:04:11 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xffffffff00000000) [ 1087.869468] FAULT_INJECTION: forcing a failure. [ 1087.869468] name failslab, interval 1, probability 0, space 0, times 0 [ 1087.869870] sd 0:0:1:0: [sg0] tag#4766 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1087.889548] sd 0:0:1:0: [sg0] tag#4766 CDB: opcode=0xfa (vendor) [ 1087.895732] sd 0:0:1:0: [sg0] tag#4766 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1087.904663] sd 0:0:1:0: [sg0] tag#4766 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1087.913580] sd 0:0:1:0: [sg0] tag#4766 CDB[20]: 65 [ 1087.952961] CPU: 1 PID: 28836 Comm: syz-executor.3 Not tainted 4.19.163-syzkaller #0 [ 1087.960962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1087.970320] Call Trace: [ 1087.972922] dump_stack+0x1fc/0x2fe [ 1087.976555] should_fail.cold+0xa/0x14 [ 1087.980444] ? setup_fault_attr+0x200/0x200 [ 1087.984764] ? lock_acquire+0x170/0x3c0 [ 1087.988746] __should_failslab+0x115/0x180 [ 1087.992983] should_failslab+0x5/0xf [ 1087.996693] kmem_cache_alloc+0x277/0x370 [ 1088.000840] __kernfs_new_node+0xd2/0x680 [ 1088.004994] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1088.009745] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1088.014458] ? __cpu_to_node+0x7b/0xa0 [ 1088.018346] ? mark_held_locks+0xf0/0xf0 [ 1088.022403] ? io_schedule_timeout+0x140/0x140 [ 1088.026980] ? enqueue_entity+0xf86/0x3850 [ 1088.031219] ? set_user_nice.part.0+0x3b9/0xab0 [ 1088.035899] kernfs_create_dir_ns+0x9e/0x230 [ 1088.040313] internal_create_group+0x1c1/0xb20 [ 1088.044899] ? sysfs_remove_link_from_group+0x70/0x70 [ 1088.050094] ? lock_downgrade+0x720/0x720 [ 1088.054249] lo_ioctl+0xf7c/0x20e0 [ 1088.057781] ? loop_set_status64+0x110/0x110 [ 1088.062185] blkdev_ioctl+0x5cb/0x1a7e [ 1088.066060] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1088.071406] ? blkpg_ioctl+0x9d0/0x9d0 [ 1088.075273] ? mark_held_locks+0xf0/0xf0 [ 1088.079331] ? mark_held_locks+0xf0/0xf0 [ 1088.083413] ? debug_check_no_obj_freed+0x201/0x482 [ 1088.088435] ? lock_downgrade+0x720/0x720 [ 1088.092599] block_ioctl+0xe9/0x130 [ 1088.096219] ? blkdev_fallocate+0x3f0/0x3f0 [ 1088.100537] do_vfs_ioctl+0xcdb/0x12e0 [ 1088.104439] ? lock_downgrade+0x720/0x720 [ 1088.108587] ? check_preemption_disabled+0x41/0x280 [ 1088.113600] ? ioctl_preallocate+0x200/0x200 [ 1088.118033] ? __fget+0x356/0x510 [ 1088.121489] ? do_dup2+0x450/0x450 [ 1088.125164] ? do_sys_open+0x2bf/0x520 [ 1088.129057] ksys_ioctl+0x9b/0xc0 [ 1088.132514] __x64_sys_ioctl+0x6f/0xb0 [ 1088.136398] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1088.140977] do_syscall_64+0xf9/0x620 [ 1088.144780] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1088.149980] RIP: 0033:0x45dfb7 [ 1088.153167] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 6d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1088.160859] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1088.172060] RSP: 002b:00007f7d235eca18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1088.172074] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045dfb7 [ 1088.172082] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1088.172089] RBP: 0000000000000000 R08: 0000000020000260 R09: 0000000000000000 [ 1088.172096] R10: 000000000003fc00 R11: 0000000000000246 R12: 0000000000000004 [ 1088.172103] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000020000270 [ 1088.245971] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 07:04:11 executing program 3 (fault-call:0 fault-nth:13): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:04:11 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1088.316774] nla_parse: 3 callbacks suppressed [ 1088.316780] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 07:04:11 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0xfffffffffffff000) [ 1088.379493] device veth44 entered promiscuous mode [ 1088.406730] sd 0:0:1:0: [sg0] tag#4765 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1088.415783] sd 0:0:1:0: [sg0] tag#4765 CDB: opcode=0xfa (vendor) [ 1088.416023] IPv6: ADDRCONF(NETDEV_UP): veth44: link is not ready [ 1088.422008] sd 0:0:1:0: [sg0] tag#4765 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1088.422041] sd 0:0:1:0: [sg0] tag#4765 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1088.445876] sd 0:0:1:0: [sg0] tag#4765 CDB[20]: 65 07:04:11 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 1088.453586] FAULT_INJECTION: forcing a failure. [ 1088.453586] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.483788] CPU: 1 PID: 28899 Comm: syz-executor.3 Not tainted 4.19.163-syzkaller #0 [ 1088.491760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1088.501108] Call Trace: [ 1088.503695] dump_stack+0x1fc/0x2fe [ 1088.507321] should_fail.cold+0xa/0x14 [ 1088.511207] ? setup_fault_attr+0x200/0x200 [ 1088.515524] ? lock_acquire+0x170/0x3c0 [ 1088.519519] __should_failslab+0x115/0x180 [ 1088.523755] should_failslab+0x5/0xf [ 1088.527487] kmem_cache_alloc+0x277/0x370 [ 1088.531744] __kernfs_new_node+0xd2/0x680 [ 1088.535895] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1088.540651] ? __cpu_to_node+0x7b/0xa0 [ 1088.544559] ? account_entity_enqueue+0x2e5/0x440 [ 1088.549399] ? mark_held_locks+0xf0/0xf0 [ 1088.553456] ? enqueue_entity+0xf86/0x3850 [ 1088.557690] ? set_user_nice.part.0+0x3b9/0xab0 [ 1088.562357] kernfs_create_dir_ns+0x9e/0x230 [ 1088.566776] internal_create_group+0x1c1/0xb20 [ 1088.571456] ? sysfs_remove_link_from_group+0x70/0x70 [ 1088.576639] ? lock_downgrade+0x720/0x720 [ 1088.580797] lo_ioctl+0xf7c/0x20e0 [ 1088.584336] ? loop_set_status64+0x110/0x110 [ 1088.588745] blkdev_ioctl+0x5cb/0x1a7e [ 1088.592642] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1088.598012] ? blkpg_ioctl+0x9d0/0x9d0 [ 1088.601891] ? mark_held_locks+0xf0/0xf0 [ 1088.605942] ? mark_held_locks+0xf0/0xf0 [ 1088.610002] ? debug_check_no_obj_freed+0x201/0x482 [ 1088.615036] ? lock_downgrade+0x720/0x720 [ 1088.619182] block_ioctl+0xe9/0x130 [ 1088.622809] ? blkdev_fallocate+0x3f0/0x3f0 [ 1088.627123] do_vfs_ioctl+0xcdb/0x12e0 [ 1088.631090] ? lock_downgrade+0x720/0x720 [ 1088.635225] ? check_preemption_disabled+0x41/0x280 [ 1088.640225] ? ioctl_preallocate+0x200/0x200 [ 1088.644613] ? __fget+0x356/0x510 [ 1088.648043] ? do_dup2+0x450/0x450 [ 1088.651573] ? do_sys_open+0x2bf/0x520 [ 1088.655459] ksys_ioctl+0x9b/0xc0 [ 1088.658899] __x64_sys_ioctl+0x6f/0xb0 [ 1088.662771] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1088.667345] do_syscall_64+0xf9/0x620 [ 1088.671142] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1088.676319] RIP: 0033:0x45dfb7 [ 1088.679497] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 6d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1088.698490] RSP: 002b:00007f7d235eca18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 07:04:12 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvfrom$ax25(r1, &(0x7f0000000000)=""/4, 0x4, 0x1, &(0x7f0000000100)={{0x3, @bcast, 0x6}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default, @bcast]}, 0x48) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r1, &(0x7f0000000240), 0x0, 0x0) pwrite64(r1, &(0x7f0000000180)="b264c14ee07528a8eed23ea9b5ef082ac3db059d06a8ff728b45e45eea105dfd94a0d5daf160a5f32d06e736ae6dd0a1da6e618faeb26332108af86e080296a5390700d69bfe25f6f5ee2fabbdddb232ff4e73fc6cd04b5d9137eaeb0e10132903c569e96dd21400d7f64737b59229016dced31ba9196a68bea4015c2cdb2d1f9d686aac4db60677c94d77a29188d69f3d85238a42816e382cbe996a549405f10cf97f8e9a83", 0xa6, 0x0) [ 1088.706189] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045dfb7 [ 1088.713452] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1088.720708] RBP: 0000000000000000 R08: 0000000020000260 R09: 0000000000000000 [ 1088.727960] R10: 000000000003fc00 R11: 0000000000000246 R12: 0000000000000004 [ 1088.735208] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000020000270 07:04:12 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x170, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x170}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1088.772454] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1088.806516] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:04:12 executing program 3 (fault-call:0 fault-nth:14): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:04:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:04:12 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:04:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYRES32=r0], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r1, &(0x7f0000000000), 0x4924924924924cb, 0x0) [ 1088.939244] device veth54 entered promiscuous mode [ 1088.978683] IPv6: ADDRCONF(NETDEV_UP): veth54: link is not ready [ 1088.994357] FAULT_INJECTION: forcing a failure. [ 1088.994357] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.994454] sd 0:0:1:0: [sg0] tag#4765 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1089.015592] sd 0:0:1:0: [sg0] tag#4765 CDB: opcode=0xfa (vendor) [ 1089.021828] sd 0:0:1:0: [sg0] tag#4765 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1089.030718] sd 0:0:1:0: [sg0] tag#4765 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1089.039625] sd 0:0:1:0: [sg0] tag#4765 CDB[20]: 65 [ 1089.042492] CPU: 1 PID: 28969 Comm: syz-executor.3 Not tainted 4.19.163-syzkaller #0 [ 1089.052409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1089.061772] Call Trace: [ 1089.064361] dump_stack+0x1fc/0x2fe [ 1089.067990] should_fail.cold+0xa/0x14 [ 1089.071882] ? setup_fault_attr+0x200/0x200 [ 1089.076204] ? lock_acquire+0x170/0x3c0 [ 1089.080184] __should_failslab+0x115/0x180 [ 1089.084418] should_failslab+0x5/0xf [ 1089.088125] kmem_cache_alloc+0x277/0x370 [ 1089.092279] __kernfs_new_node+0xd2/0x680 [ 1089.096427] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1089.101192] ? kernfs_activate+0x2c/0x1d0 [ 1089.105348] ? lock_downgrade+0x720/0x720 [ 1089.109487] ? kernfs_add_one+0x51/0x4c0 [ 1089.113529] ? __mutex_add_waiter+0x160/0x160 [ 1089.118002] ? __mutex_unlock_slowpath+0xea/0x610 [ 1089.122821] kernfs_new_node+0x92/0x120 [ 1089.126771] __kernfs_create_file+0x51/0x33f [ 1089.131154] sysfs_add_file_mode_ns+0x226/0x540 [ 1089.135810] internal_create_group+0x355/0xb20 [ 1089.140377] ? sysfs_remove_link_from_group+0x70/0x70 [ 1089.145541] ? lock_downgrade+0x720/0x720 [ 1089.149669] lo_ioctl+0xf7c/0x20e0 [ 1089.153190] ? loop_set_status64+0x110/0x110 [ 1089.157579] blkdev_ioctl+0x5cb/0x1a7e [ 1089.161480] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1089.166818] ? blkpg_ioctl+0x9d0/0x9d0 [ 1089.170679] ? mark_held_locks+0xf0/0xf0 [ 1089.174711] ? mark_held_locks+0xf0/0xf0 [ 1089.178748] ? debug_check_no_obj_freed+0x201/0x482 [ 1089.183750] ? lock_downgrade+0x720/0x720 [ 1089.187881] block_ioctl+0xe9/0x130 [ 1089.191481] ? blkdev_fallocate+0x3f0/0x3f0 [ 1089.195791] do_vfs_ioctl+0xcdb/0x12e0 [ 1089.199661] ? lock_downgrade+0x720/0x720 [ 1089.203782] ? check_preemption_disabled+0x41/0x280 [ 1089.208775] ? ioctl_preallocate+0x200/0x200 [ 1089.213159] ? __fget+0x356/0x510 [ 1089.216590] ? do_dup2+0x450/0x450 [ 1089.220106] ? do_sys_open+0x2bf/0x520 [ 1089.223974] ksys_ioctl+0x9b/0xc0 [ 1089.227401] __x64_sys_ioctl+0x6f/0xb0 [ 1089.231280] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1089.235844] do_syscall_64+0xf9/0x620 [ 1089.239631] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1089.244795] RIP: 0033:0x45dfb7 [ 1089.247963] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 6d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1089.266836] RSP: 002b:00007f7d235eca18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1089.274517] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045dfb7 [ 1089.281763] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1089.289008] RBP: 0000000000000000 R08: 0000000020000260 R09: 0000000000000000 [ 1089.296258] R10: 000000000003fc00 R11: 0000000000000246 R12: 0000000000000004 [ 1089.303507] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000020000270 07:04:12 executing program 3 (fault-call:0 fault-nth:15): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1089.373488] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 07:04:12 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x170, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x170}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1089.493521] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1089.562566] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 07:04:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1089.606000] FAULT_INJECTION: forcing a failure. [ 1089.606000] name failslab, interval 1, probability 0, space 0, times 0 [ 1089.642411] device veth44 entered promiscuous mode [ 1089.649927] CPU: 1 PID: 29029 Comm: syz-executor.3 Not tainted 4.19.163-syzkaller #0 [ 1089.657811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1089.667168] Call Trace: [ 1089.669758] dump_stack+0x1fc/0x2fe [ 1089.673388] should_fail.cold+0xa/0x14 [ 1089.677278] ? setup_fault_attr+0x200/0x200 [ 1089.681601] ? lock_acquire+0x170/0x3c0 [ 1089.685585] __should_failslab+0x115/0x180 [ 1089.689823] should_failslab+0x5/0xf [ 1089.693539] kmem_cache_alloc+0x277/0x370 [ 1089.697691] __kernfs_new_node+0xd2/0x680 [ 1089.701841] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1089.706593] ? __mutex_unlock_slowpath+0xea/0x610 [ 1089.711438] ? wait_for_completion_io+0x10/0x10 [ 1089.715409] IPv6: ADDRCONF(NETDEV_UP): veth44: link is not ready [ 1089.716098] ? kernfs_next_descendant_post+0x19c/0x290 [ 1089.716116] kernfs_new_node+0x92/0x120 [ 1089.716130] __kernfs_create_file+0x51/0x33f [ 1089.716145] sysfs_add_file_mode_ns+0x226/0x540 [ 1089.740545] internal_create_group+0x355/0xb20 [ 1089.745145] ? sysfs_remove_link_from_group+0x70/0x70 [ 1089.750341] ? lock_downgrade+0x720/0x720 [ 1089.754495] lo_ioctl+0xf7c/0x20e0 [ 1089.758036] ? loop_set_status64+0x110/0x110 [ 1089.762449] blkdev_ioctl+0x5cb/0x1a7e [ 1089.766338] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1089.771702] ? blkpg_ioctl+0x9d0/0x9d0 [ 1089.775588] ? mark_held_locks+0xf0/0xf0 [ 1089.779645] ? mark_held_locks+0xf0/0xf0 [ 1089.783709] ? debug_check_no_obj_freed+0x201/0x482 [ 1089.788743] ? lock_downgrade+0x720/0x720 [ 1089.792997] block_ioctl+0xe9/0x130 [ 1089.796619] ? blkdev_fallocate+0x3f0/0x3f0 [ 1089.800940] do_vfs_ioctl+0xcdb/0x12e0 [ 1089.804823] ? lock_downgrade+0x720/0x720 [ 1089.808963] ? check_preemption_disabled+0x41/0x280 [ 1089.813994] ? ioctl_preallocate+0x200/0x200 [ 1089.818402] ? __fget+0x356/0x510 [ 1089.821856] ? do_dup2+0x450/0x450 [ 1089.825393] ? do_sys_open+0x2bf/0x520 [ 1089.829281] ksys_ioctl+0x9b/0xc0 [ 1089.832730] __x64_sys_ioctl+0x6f/0xb0 [ 1089.836610] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1089.841191] do_syscall_64+0xf9/0x620 [ 1089.845006] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1089.850191] RIP: 0033:0x45dfb7 [ 1089.853399] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 6d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1089.872293] RSP: 002b:00007f7d235eca18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1089.879993] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045dfb7 [ 1089.887254] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1089.894517] RBP: 0000000000000000 R08: 0000000020000260 R09: 0000000000000000 07:04:13 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000100)=@req={0x28, &(0x7f0000000080)={'netdevsim0\x00', @ifru_names}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0xc040) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000170a05000000000000000000050000050900020073797a32000000000900010073797a34000000000c0005400000000000000003"], 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000010) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2f}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0xd5) [ 1089.901781] R10: 000000000003fc00 R11: 0000000000000246 R12: 0000000000000004 [ 1089.909139] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000020000270 [ 1089.970242] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1089.996407] sd 0:0:1:0: [sg0] tag#4766 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1090.005517] sd 0:0:1:0: [sg0] tag#4766 CDB: opcode=0xfa (vendor) [ 1090.011766] sd 0:0:1:0: [sg0] tag#4766 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1090.020758] sd 0:0:1:0: [sg0] tag#4766 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1090.030620] sd 0:0:1:0: [sg0] tag#4766 CDB[20]: 65 07:04:13 executing program 3 (fault-call:0 fault-nth:16): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1090.136346] FAULT_INJECTION: forcing a failure. [ 1090.136346] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.166876] CPU: 0 PID: 29089 Comm: syz-executor.3 Not tainted 4.19.163-syzkaller #0 [ 1090.174766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1090.184112] Call Trace: [ 1090.186703] dump_stack+0x1fc/0x2fe [ 1090.190331] should_fail.cold+0xa/0x14 [ 1090.194215] ? setup_fault_attr+0x200/0x200 [ 1090.198540] ? lock_acquire+0x170/0x3c0 [ 1090.202520] __should_failslab+0x115/0x180 [ 1090.206751] should_failslab+0x5/0xf [ 1090.210453] kmem_cache_alloc+0x277/0x370 [ 1090.214596] __kernfs_new_node+0xd2/0x680 [ 1090.218739] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1090.223494] ? __mutex_unlock_slowpath+0xea/0x610 [ 1090.228342] ? wait_for_completion_io+0x10/0x10 [ 1090.233013] ? kernfs_next_descendant_post+0x19c/0x290 [ 1090.238293] kernfs_new_node+0x92/0x120 [ 1090.242289] __kernfs_create_file+0x51/0x33f [ 1090.246697] sysfs_add_file_mode_ns+0x226/0x540 [ 1090.251372] internal_create_group+0x355/0xb20 [ 1090.255947] ? sysfs_remove_link_from_group+0x70/0x70 [ 1090.261119] ? lock_downgrade+0x720/0x720 [ 1090.265254] lo_ioctl+0xf7c/0x20e0 [ 1090.268788] ? loop_set_status64+0x110/0x110 [ 1090.273187] blkdev_ioctl+0x5cb/0x1a7e [ 1090.277070] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1090.282420] ? blkpg_ioctl+0x9d0/0x9d0 [ 1090.286290] ? mark_held_locks+0xf0/0xf0 [ 1090.290355] ? mark_held_locks+0xf0/0xf0 [ 1090.294406] ? debug_check_no_obj_freed+0x201/0x482 [ 1090.299416] ? lock_downgrade+0x720/0x720 [ 1090.303568] block_ioctl+0xe9/0x130 [ 1090.307190] ? blkdev_fallocate+0x3f0/0x3f0 [ 1090.311510] do_vfs_ioctl+0xcdb/0x12e0 [ 1090.315388] ? lock_downgrade+0x720/0x720 [ 1090.319513] ? check_preemption_disabled+0x41/0x280 [ 1090.324519] ? ioctl_preallocate+0x200/0x200 [ 1090.328934] ? __fget+0x356/0x510 [ 1090.332402] ? do_dup2+0x450/0x450 [ 1090.335939] ? do_sys_open+0x2bf/0x520 [ 1090.339832] ksys_ioctl+0x9b/0xc0 [ 1090.343281] __x64_sys_ioctl+0x6f/0xb0 [ 1090.347169] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1090.351746] do_syscall_64+0xf9/0x620 [ 1090.355548] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1090.360771] RIP: 0033:0x45dfb7 [ 1090.363952] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 6d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1090.382847] RSP: 002b:00007f7d235eca18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1090.390558] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045dfb7 [ 1090.397814] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1090.405069] RBP: 0000000000000000 R08: 0000000020000260 R09: 0000000000000000 [ 1090.412335] R10: 000000000003fc00 R11: 0000000000000246 R12: 0000000000000004 [ 1090.419590] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000020000270 07:04:13 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x170, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x170}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:04:13 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:04:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:04:13 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:04:14 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000000)=r2) [ 1090.562649] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1090.596506] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:04:14 executing program 3 (fault-call:0 fault-nth:17): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1090.620559] sd 0:0:1:0: [sg0] tag#4765 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1090.629571] sd 0:0:1:0: [sg0] tag#4765 CDB: opcode=0xfa (vendor) [ 1090.635757] sd 0:0:1:0: [sg0] tag#4765 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1090.644673] sd 0:0:1:0: [sg0] tag#4765 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1090.653581] sd 0:0:1:0: [sg0] tag#4765 CDB[20]: 65 [ 1090.726875] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1090.762466] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1090.786105] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1090.831974] FAULT_INJECTION: forcing a failure. [ 1090.831974] name failslab, interval 1, probability 0, space 0, times 0 07:04:14 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:04:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1090.904262] device veth44 entered promiscuous mode [ 1090.941125] CPU: 0 PID: 29161 Comm: syz-executor.3 Not tainted 4.19.163-syzkaller #0 [ 1090.949022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1090.958375] Call Trace: [ 1090.960962] dump_stack+0x1fc/0x2fe [ 1090.964591] should_fail.cold+0xa/0x14 [ 1090.968480] ? setup_fault_attr+0x200/0x200 [ 1090.972797] ? lock_acquire+0x170/0x3c0 [ 1090.976776] __should_failslab+0x115/0x180 [ 1090.981010] should_failslab+0x5/0xf [ 1090.984722] kmem_cache_alloc+0x277/0x370 [ 1090.988868] __kernfs_new_node+0xd2/0x680 [ 1090.993013] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1090.997772] ? __mutex_unlock_slowpath+0xea/0x610 [ 1091.002627] ? wait_for_completion_io+0x10/0x10 [ 1091.007293] ? kernfs_next_descendant_post+0x19c/0x290 [ 1091.012566] kernfs_new_node+0x92/0x120 [ 1091.016648] __kernfs_create_file+0x51/0x33f [ 1091.021080] sysfs_add_file_mode_ns+0x226/0x540 [ 1091.025768] internal_create_group+0x355/0xb20 [ 1091.030359] ? sysfs_remove_link_from_group+0x70/0x70 [ 1091.035546] ? lock_downgrade+0x720/0x720 [ 1091.039699] lo_ioctl+0xf7c/0x20e0 [ 1091.043242] ? loop_set_status64+0x110/0x110 [ 1091.047651] blkdev_ioctl+0x5cb/0x1a7e [ 1091.051566] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1091.056927] ? blkpg_ioctl+0x9d0/0x9d0 [ 1091.060806] ? mark_held_locks+0xf0/0xf0 [ 1091.064882] ? mark_held_locks+0xf0/0xf0 [ 1091.068944] ? debug_check_no_obj_freed+0x201/0x482 [ 1091.073958] ? lock_downgrade+0x720/0x720 [ 1091.078107] block_ioctl+0xe9/0x130 [ 1091.081736] ? blkdev_fallocate+0x3f0/0x3f0 [ 1091.086068] do_vfs_ioctl+0xcdb/0x12e0 [ 1091.089954] ? lock_downgrade+0x720/0x720 [ 1091.091340] IPv6: ADDRCONF(NETDEV_UP): veth44: link is not ready [ 1091.094089] ? check_preemption_disabled+0x41/0x280 [ 1091.094105] ? ioctl_preallocate+0x200/0x200 [ 1091.094122] ? __fget+0x356/0x510 [ 1091.094139] ? do_dup2+0x450/0x450 [ 1091.116625] ? do_sys_open+0x2bf/0x520 [ 1091.120577] ksys_ioctl+0x9b/0xc0 [ 1091.124034] __x64_sys_ioctl+0x6f/0xb0 [ 1091.128014] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1091.132599] do_syscall_64+0xf9/0x620 [ 1091.136399] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1091.141580] RIP: 0033:0x45dfb7 [ 1091.144765] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 6d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1091.163652] RSP: 002b:00007f7d235eca18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1091.171351] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045dfb7 [ 1091.178611] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1091.185872] RBP: 0000000000000000 R08: 0000000020000260 R09: 0000000000000000 [ 1091.193139] R10: 000000000003fc00 R11: 0000000000000246 R12: 0000000000000004 [ 1091.200402] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000020000270 07:04:14 executing program 3 (fault-call:0 fault-nth:18): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1091.247701] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1091.256024] device veth54 entered promiscuous mode 07:04:14 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x1, 0xfffffffc, 0x1, 0x5, 0xf1, 0x6, 0x1], 0x7, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000140)={0x80000000, 0x7f, 0x1ff, 0xe0e0e0e0}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x4, 0x1, 0x3, {0xa, 0x4e22, 0x10000, @dev={0xfe, 0x80, [], 0x42}, 0x3}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000080)="e948185d003d5b310d72e05be85be26495616047f292eb834e5a4fb0b5afcab6b96b0f712b4aa6258f174f5adc65617f1d65648e", 0x34}, {&(0x7f00000000c0)="378385ee0c740e368713ddc2df063669881775ebf81ab95408bba04dafd357c511f347301cc569dee0d4755fa12800e1bbd0768da008e7a5b32b8ec6b42aa7b078424243c4880ce84e9c101f0355aa505b5bd367617156d111d1bfd2088af914efd0", 0x62}], 0x2, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x24, 0xfa}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}}], 0x1, 0x44090) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0}) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f00000000c0)={r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000780)={r4}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000180)={r4}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r6, &(0x7f0000000000), 0x4924924924924cb, 0x0) [ 1091.295630] IPv6: ADDRCONF(NETDEV_UP): veth54: link is not ready [ 1091.297076] sd 0:0:1:0: [sg0] tag#4765 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1091.310581] sd 0:0:1:0: [sg0] tag#4765 CDB: opcode=0xfa (vendor) [ 1091.316799] sd 0:0:1:0: [sg0] tag#4765 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1091.325661] sd 0:0:1:0: [sg0] tag#4765 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1091.334658] sd 0:0:1:0: [sg0] tag#4765 CDB[20]: 65 [ 1091.381841] FAULT_INJECTION: forcing a failure. [ 1091.381841] name failslab, interval 1, probability 0, space 0, times 0 [ 1091.395279] CPU: 0 PID: 29216 Comm: syz-executor.3 Not tainted 4.19.163-syzkaller #0 [ 1091.403160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1091.412498] Call Trace: [ 1091.415076] dump_stack+0x1fc/0x2fe [ 1091.418795] should_fail.cold+0xa/0x14 [ 1091.422675] ? setup_fault_attr+0x200/0x200 [ 1091.426987] ? lock_acquire+0x170/0x3c0 [ 1091.430963] __should_failslab+0x115/0x180 [ 1091.435193] should_failslab+0x5/0xf [ 1091.438896] kmem_cache_alloc+0x277/0x370 [ 1091.443039] __kernfs_new_node+0xd2/0x680 [ 1091.447179] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1091.451934] ? __mutex_unlock_slowpath+0xea/0x610 [ 1091.456781] ? wait_for_completion_io+0x10/0x10 [ 1091.461445] ? kernfs_next_descendant_post+0x19c/0x290 [ 1091.466717] kernfs_new_node+0x92/0x120 [ 1091.470685] __kernfs_create_file+0x51/0x33f [ 1091.475088] sysfs_add_file_mode_ns+0x226/0x540 [ 1091.479754] internal_create_group+0x355/0xb20 [ 1091.484332] ? sysfs_remove_link_from_group+0x70/0x70 [ 1091.489513] ? lock_downgrade+0x720/0x720 [ 1091.493669] lo_ioctl+0xf7c/0x20e0 [ 1091.497207] ? loop_set_status64+0x110/0x110 [ 1091.501611] blkdev_ioctl+0x5cb/0x1a7e [ 1091.505496] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1091.510864] ? blkpg_ioctl+0x9d0/0x9d0 [ 1091.514746] ? mark_held_locks+0xf0/0xf0 [ 1091.518788] ? mark_held_locks+0xf0/0xf0 [ 1091.522876] ? debug_check_no_obj_freed+0x201/0x482 [ 1091.527875] ? lock_downgrade+0x720/0x720 [ 1091.532005] block_ioctl+0xe9/0x130 [ 1091.535613] ? blkdev_fallocate+0x3f0/0x3f0 [ 1091.539918] do_vfs_ioctl+0xcdb/0x12e0 [ 1091.543787] ? lock_downgrade+0x720/0x720 [ 1091.547915] ? check_preemption_disabled+0x41/0x280 [ 1091.552911] ? ioctl_preallocate+0x200/0x200 [ 1091.557303] ? __fget+0x356/0x510 [ 1091.560739] ? do_dup2+0x450/0x450 [ 1091.564260] ? do_sys_open+0x2bf/0x520 [ 1091.568129] ksys_ioctl+0x9b/0xc0 [ 1091.571561] __x64_sys_ioctl+0x6f/0xb0 [ 1091.575429] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1091.579994] do_syscall_64+0xf9/0x620 [ 1091.583778] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1091.588944] RIP: 0033:0x45dfb7 [ 1091.592115] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 6d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1091.610992] RSP: 002b:00007f7d235eca18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1091.618676] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045dfb7 [ 1091.625925] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1091.633165] RBP: 0000000000000000 R08: 0000000020000260 R09: 0000000000000000 [ 1091.640419] R10: 000000000003fc00 R11: 0000000000000246 R12: 0000000000000004 [ 1091.647660] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000020000270 07:04:15 executing program 3 (fault-call:0 fault-nth:19): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1091.691440] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 07:04:15 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:04:15 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:04:15 executing program 1: ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000240)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c801}, 0x44040) sendmmsg$alg(r0, &(0x7f0000000f40)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="a55efb7c231f9306d1e8a26eb41e09030a2e93a7c977d0121276888f563c3fe00240cc3275176381", 0x28}, {&(0x7f0000000100)="0e4801cbaf6669414ce08e274342aa4da959c400b1d059ecaace83df6111d1ba5344731ce156838032691ed119831b30a78c756520c750912487f78cd6b79a8e29bce4c76709b9a0e80a23e13c442670148f96949aae27264e181928745f93815eec7482174374e25b6af6028748c66593350cc260832c1d845a8d1ea77e359bf87e09a4c5ef47da3e82cfbf75c843d8fad545e3a5e8a004a0fb04a365719570342a73887e55ea02a7d1765ab0a4d34f41db7112cfb1edad9b2eb48c2cf7ddee77eb2d37b6679b2a3387a92deb67", 0xce}], 0x2, &(0x7f0000000240), 0x0, 0x20008001}, {0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="009e25f67d00ee99ae200188d93044d0af", 0x11}, {&(0x7f0000000440)="f8fc367eaabce48047efaed3b473d22045e4287ba9c31fd49aede60d54cac1bcc953d65ffd76c121718b9d048a7a9014f4775a3b4d2f9c640133e766c7aa6bc604a0848bf29bf273339669e49afefb3a7a20e580a6c69479aeeeaffff5573961975ec87e6fd87958593c9dba223eccf879438c4c6d62351e9520aaf3fed0b8e5eeea198bcb86f7423f1fc62941d10826029ea7377b08649803cf9a21bc87153aa89e9fa167b4fc36d81b072f03fa", 0xae}, {&(0x7f0000000500)="1d12832d64eb75a97f75fcaba002506358b22e455bdfc52bd8142d7ce8aa0d303854e7b769aeb911e27a7eef2bc20814e9432c819157c36e5e98a5418c3b39e0dcf87da1f017eadc32d3202e2f", 0x4d}, {&(0x7f0000000580)="7ef73d740f496318b3148f24272c87f2d17b6150a58584e8eab3771ae567907a0e9c0328180ad641bf5c67046f940b0b2e4872cc28afce0cb95290b7716d036c6287730497388e34bb9193b312ddc5a81ad4668d1cf2ff6b22bfc43c05b9ed231cebc790ed82744de42be81ff43cfaf815850da7dd93", 0x76}, {&(0x7f00000003c0)="040b6ce4910273ca554d3cacb790b547254da13396e8f56880feb0c77d0c4513b691", 0x22}, {&(0x7f0000000600)="6f8c1a452696bbd623e331eb89347c054e08047411927a900a1b6d34e985eb1f885e4c94b60b2dd9aa851ac44f46c03f293d2e1ce4b7c3ffbeaf470aae26c22685c6620ffdedcf37ae195b152e2cf65f44727754370a1c57fca9d72175715756620552c1c5142f46ca37f3eadaeecc22e4008edc1a5ce855bb28e084ffa108f9545a0cf0df1ca4d55c96837f68cdddb3fdad4fbac7edde62e06d7a70f47d9765dda039e4af22e177756f1ebaf1b5aeee6df10511a8748c7169d3056af07d610ad9fc26c4904b0e64e1ad", 0xca}, {&(0x7f0000000700)="965c4a9d169fc5afe66487705a5b38f6a9dcbe8fd15813fccfc94f1ef5cfad7e9b80d9085dae1884eaa1adeb781b0fcfb86838", 0x33}, {&(0x7f0000000740)="5a1cf123fb13752aaeb58cbd8aea540dc10bbb0f69c4d3e22743c29513631786744d8bead3cda7d58f72b57e646215abbaf7eb29c3fa54791895072caf2942c8faa3dbfa021f84d989dcb74cc4c52dfdde186185d207483b189c43679efee413df093341f57304d8da1ce0c3a57474888025b08ad9c540349e8b3e467e512954", 0x80}, {&(0x7f00000007c0)="35fc8338118b9230d95de10bc3bba9f1ff1e544cc246877cb620df7f3fa77e354b760821fab5a9d55a8ff05b4229fb9afe144b969d4e620d103f64ebe94385b8beef891ce795", 0x46}], 0x9, &(0x7f0000000900), 0x0, 0x24048040}, {0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a00)="ae38b061f0727edcfa9257d476b19a8c4820e0436f26002bbc95421c073e2be0c94c3e81783c2e2f", 0x28}, {&(0x7f0000000a40)="c804a06d0d7a186aa0e7379812fd43099b56a5b90b2d29d14bca83cecbfb9a15657990cc2ad1a9429fab41d4cb1c8803a2c9ecc19cf4077a92391613dd76764b7c8d96a88e8c03e711fa2c24ec6e2a0715d132f69ec4d0a50c68854705e3c14dccefbbb680aede13e2f47523f58f61648c9964e57a3d386f9d2a7c7c304fdd8645efe498528e329451497f2201d48125ecdfb8cd666c7c72e1f0f7c9766c105da07ee0833dfc7d98607787e22cacce2d77a6b05c5791f4e670ab77de6b6261af7b012ab6178389d8f79a8b12fba8b2847ae8151f68657885541f77fe181b8d212133222e4c30f773c8fe34da1ddbdfa636dda9", 0xf3}], 0x2, &(0x7f0000000b80)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0xa0, 0x117, 0x2, 0x87, "7338266bc293d2cf9ff781a0c76b02be5e438fcba873a6cd708fc5039fb1632927a039754b24536e25b099b4f0610bf9ba69fb004696075ad802692b3815177d90c4de38cba8616d3fa1e084ba1b674f36aa613a5c509541fd63861004c35935f2690064ce85d090c8165bf6e9a7886e70193624c86dbe70531010dcdd8a52233481034e506e7e"}, @assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x8}, @iv={0xa8, 0x117, 0x2, 0x94, "d26bca44b522270b1e0423761b94352a632f6f53cfaf8349d2b43824d450f1b4f835e41331b3bddcfcdfcc4c7fcfe0f4ed8087e17d9b8b7d4017f325d094c3f0431b2e5ad68551a8b9e616f7fc76c136503f099a94cb1c4637703718847aea3b9540cbb660c172af19e614af2135714040eda9f7cde6088870d9caa416d49cb30426784c0cd7661eca44e8320d3ccad4bb8c0cf8"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xbc}, @iv={0x108, 0x117, 0x2, 0xf2, "badba1227aa4e72a8266cac79c7e26194557559ac9a2bff8432a5ef255df7c04b9ff3387502f32f9d3b1985add3c8706acc5873c7eaa8fd555dda5ee7a4de3a438f6419bb01661a5a18afd3a5858ea9b0aa04a84d9db11646ffe1328392cf9620e3c705cce976208ef4c8916c1d68a34cfebc0a20418d587d1f73a299695ae04d9e382d9797debc52d18dd57b6f940dabc74ac9fd4b04218bbf8faa99cd89c5dcb15713f82c6c0b357e0475ff08ea7070443612a1a9d000d69395ed650389694a1b23cb699e74a4645019d1c7a659d4455a2f2f3ceae9a6a487aafa962fbf7999b3fab7bdfa7ca8dd563634fcb1fc209f523"}], 0x2e0, 0x20000871}], 0x3, 0x0) 07:04:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:04:15 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1091.968572] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1092.011000] FAULT_INJECTION: forcing a failure. [ 1092.011000] name failslab, interval 1, probability 0, space 0, times 0 [ 1092.049565] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1092.068238] sd 0:0:1:0: [sg0] tag#4765 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1092.077159] sd 0:0:1:0: [sg0] tag#4765 CDB: opcode=0xfa (vendor) [ 1092.080486] CPU: 1 PID: 29275 Comm: syz-executor.3 Not tainted 4.19.163-syzkaller #0 [ 1092.083331] sd 0:0:1:0: [sg0] tag#4765 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1092.091163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1092.091168] Call Trace: [ 1092.091187] dump_stack+0x1fc/0x2fe [ 1092.091207] should_fail.cold+0xa/0x14 [ 1092.091221] ? setup_fault_attr+0x200/0x200 [ 1092.100083] sd 0:0:1:0: [sg0] tag#4765 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1092.109368] ? lock_acquire+0x170/0x3c0 [ 1092.109388] __should_failslab+0x115/0x180 [ 1092.109404] should_failslab+0x5/0xf [ 1092.111984] sd 0:0:1:0: [sg0] tag#4765 CDB[20]: 65 [ 1092.115582] kmem_cache_alloc+0x277/0x370 [ 1092.115595] __kernfs_new_node+0xd2/0x680 [ 1092.115614] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1092.162365] ? __mutex_unlock_slowpath+0xea/0x610 [ 1092.167211] ? wait_for_completion_io+0x10/0x10 [ 1092.171883] ? kernfs_next_descendant_post+0x19c/0x290 [ 1092.177166] kernfs_new_node+0x92/0x120 [ 1092.181144] __kernfs_create_file+0x51/0x33f [ 1092.185554] sysfs_add_file_mode_ns+0x226/0x540 [ 1092.190234] internal_create_group+0x355/0xb20 [ 1092.194821] ? sysfs_remove_link_from_group+0x70/0x70 [ 1092.200007] ? lock_downgrade+0x720/0x720 [ 1092.204172] lo_ioctl+0xf7c/0x20e0 [ 1092.207725] ? loop_set_status64+0x110/0x110 [ 1092.212139] blkdev_ioctl+0x5cb/0x1a7e [ 1092.216022] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1092.221387] ? blkpg_ioctl+0x9d0/0x9d0 [ 1092.225291] ? mark_held_locks+0xf0/0xf0 [ 1092.229351] ? mark_held_locks+0xf0/0xf0 [ 1092.233418] ? debug_check_no_obj_freed+0x201/0x482 [ 1092.238441] ? lock_downgrade+0x720/0x720 [ 1092.242588] block_ioctl+0xe9/0x130 [ 1092.246214] ? blkdev_fallocate+0x3f0/0x3f0 [ 1092.250532] do_vfs_ioctl+0xcdb/0x12e0 [ 1092.254417] ? lock_downgrade+0x720/0x720 [ 1092.258557] ? check_preemption_disabled+0x41/0x280 [ 1092.263574] ? ioctl_preallocate+0x200/0x200 [ 1092.267986] ? __fget+0x356/0x510 [ 1092.271443] ? do_dup2+0x450/0x450 [ 1092.274984] ? do_sys_open+0x2bf/0x520 [ 1092.278888] ksys_ioctl+0x9b/0xc0 [ 1092.282351] __x64_sys_ioctl+0x6f/0xb0 [ 1092.286239] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1092.290819] do_syscall_64+0xf9/0x620 [ 1092.294621] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1092.299808] RIP: 0033:0x45dfb7 [ 1092.303000] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 6d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1092.317296] sd 0:0:1:0: [sg0] tag#4765 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1092.321893] RSP: 002b:00007f7d235eca18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1092.321907] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045dfb7 [ 1092.321916] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1092.321923] RBP: 0000000000000000 R08: 0000000020000260 R09: 0000000000000000 [ 1092.321930] R10: 000000000003fc00 R11: 0000000000000246 R12: 0000000000000004 [ 1092.321941] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000020000270 [ 1092.330667] sd 0:0:1:0: [sg0] tag#4765 CDB: opcode=0xfa (vendor) [ 1092.381092] sd 0:0:1:0: [sg0] tag#4765 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1092.389997] sd 0:0:1:0: [sg0] tag#4765 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1092.398887] sd 0:0:1:0: [sg0] tag#4765 CDB[20]: 65 [ 1092.452153] device veth54 entered promiscuous mode 07:04:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:04:15 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x9, 0x7, 0x100, 0x50, @empty, @mcast1, 0x80, 0x7800, 0x80000000, 0x5a2}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'ip6tnl0\x00', r1, 0x29, 0x81, 0x7f, 0x4, 0x20, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast1, 0x8000, 0x7, 0x7, 0x4}}) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x175c, 0x1, 0x5, 0x3, 0x0, 0x0, {0x1}, [{{0x254, 0x1, {{0x1, 0x400}, 0x6, 0xa8, 0x1, 0x7, 0x28, 'syz1\x00', "81cee52aae0374134e88f8eea94b558a062422a8347f32c536dfe5c1f77c3440", "764df07daaf3d0a5c917e23aef525f41a58e67112ca1152437bb36e746e01365", [{0x4, 0x5, {0x0, 0x1}}, {0x400, 0xcb5, {0x1, 0x2}}, {0x1, 0xdce8, {0x0, 0x4}}, {0x3f, 0x0, {0x2, 0xffffff3f}}, {0x9000, 0x6, {0x3, 0x101}}, {0x7666, 0x7, {0x2, 0x81}}, {0xfa, 0xf800, {0x3, 0x200}}, {0x40, 0x9, {0x0, 0x1}}, {0x76, 0x8001, {0x1, 0x1}}, {0x3, 0x1, {0x3, 0xffff}}, {0x8, 0x1, {0x1, 0x7f}}, {0x3f, 0x401, {0x1, 0x9}}, {0x6, 0x7fa, {0x0, 0x10000}}, {0x3, 0x101, {0x0, 0x2}}, {0x1, 0x7, {0x1, 0x8001}}, {0x1ab8, 0x7fff, {0x0, 0x3}}, {0x3, 0x1, {0x3, 0x18fdc17d}}, {0xfff8, 0x6, {0x2, 0xffffdf57}}, {0xfff7, 0x3ff, {0x0, 0x200}}, {0x20, 0x6, {0x3, 0xfffffffc}}, {0x80, 0x3, {0x1, 0x9}}, {0x4, 0x28, {0x0, 0x10000}}, {0xd014, 0x5, {0x87640426b8e54c4c, 0x9}}, {0x100, 0x3, {0x0, 0x80000001}}, {0x3f, 0xa1c2, {0x1, 0x400}}, {0x5, 0x8, {0x2, 0x3ff}}, {0x1, 0x1000, {0x1, 0x57f5dae9}}, {0x5, 0x3b26, {0x2, 0x7}}, {0x6, 0x3ff, {0x3, 0x9e2e}}, {0x4, 0x100, {0x2, 0x800}}, {0x5, 0x6, {0x3, 0x10000}}, {0xcd5b, 0x3, {0x1}}, {0xdb17, 0xffff, {0x2, 0x3f0}}, {0x4, 0x4, {0x0, 0x5}}, {0x9486, 0xfff8, {0x2, 0x6}}, {0x8, 0x7, {0x3, 0x83f}}, {0x4, 0x101, {0x2, 0x20}}, {0x1000, 0x2, {0x1, 0xffff4d3e}}, {0x800, 0xff, {0x2, 0x67}}, {0x1ff, 0x9, {0x1}}]}}}, {{0x254, 0x1, {{0x1, 0x3}, 0x8, 0x1, 0x81, 0x8000, 0x28, 'syz1\x00', "f36016e6aa063af6437ca12860a492cebaca3f269d4c40c449299187f53c1762", "545917a3bf66ad79906031a5e0de18cd6e07c50695390025809bfa65a9739ded", [{0x3, 0x7, {0x0, 0x72}}, {0x7, 0x8, {0x0, 0x8}}, {0x3f, 0x2, {0x3, 0xccb2}}, {0x3ff, 0xffff, {0x0, 0x1}}, {0x701d, 0x16cc, {0x2, 0x4}}, {0xf51f, 0x0, {0x0, 0x8}}, {0x81, 0x6, {0x2}}, {0x2, 0x8001, {0x3, 0x7fff}}, {0x5, 0x2, {0x2, 0xcd}}, {0x2, 0x4, {0x3, 0x80000001}}, {0x200, 0x81, {0x1}}, {0x5, 0x1, {0x2, 0x101}}, {0xfffe, 0x9, {0x0, 0x7a}}, {0xff, 0x7, {0x3, 0x401}}, {0x3ff, 0x0, {0x0, 0x6}}, {0x2, 0x7, {0x2, 0xff}}, {0x1, 0x20, {0x3, 0x2}}, {0x94, 0x0, {0x0, 0x7f}}, {0x1, 0xe0, {0x3, 0x9}}, {0x7, 0x81, {0x3, 0x9}}, {0xb8d0, 0x2, {0x2, 0x80}}, {0x8, 0x6000, {0x0, 0x400}}, {0x7ff, 0x7, {0x1, 0x7}}, {0x8b1c, 0xed3, {0x1, 0x8}}, {0x7f, 0x20, {0x1, 0x6}}, {0x5, 0x8000, {0x0, 0x401}}, {0x4, 0x4, {0x3, 0x3}}, {0xeee, 0x7, {0x2, 0x7fffffff}}, {0x7ff, 0x2368, {0x2, 0x55}}, {0x83, 0x1, {0x3, 0x1f}}, {0x2, 0x7, {0x1}}, {0x2, 0x40, {0x0, 0xff}}, {0x7fff, 0x1, {0x2, 0x5}}, {0x7, 0x7fff, {0x2, 0x599c}}, {0xdcff, 0x0, {0x2, 0x8}}, {0x3, 0x8000, {0x3, 0x4}}, {0x7, 0x5, {0x1, 0x4}}, {0xe526, 0x7, {0x3, 0xffff}}, {0xfe00, 0xff01, {0x3, 0x6}}, {0x5, 0x2, {0x1, 0x7}}]}}}, {{0x254, 0x1, {{0x2, 0x6}, 0x81, 0x0, 0x0, 0x8, 0xc, 'syz1\x00', "86a70a64eb0c5927c781214bbcebcf65fe98e77135bf3b983c0e65c6461388bb", "724df00cdd13133bc030f0f5665a62194953b1186aad065e533d0e69c8227e94", [{0x9, 0x80, {0x1, 0x1}}, {0xfff7, 0x1f, {0x3, 0x6}}, {0x7, 0x8000, {0x1, 0x5}}, {0xeca, 0xff, {0x0, 0x6002}}, {0x3, 0x101, {0x3}}, {0x0, 0x6, {0x2, 0x8000}}, {0x7fff, 0x1f, {0x3, 0x4}}, {0x3, 0x4, {0x1}}, {0x21d, 0x7, {0x0, 0x10001}}, {0x6, 0xff, {0x3, 0x6}}, {0x2, 0x8001, {0x0, 0xfffffff7}}, {0x3, 0x3, {0x1, 0x4}}, {0x2, 0x3, {0x3, 0x7ff}}, {0xff00, 0x9, {0x3, 0x8}}, {0x1, 0x7fff, {0x1, 0x9}}, {0x4, 0x1, {0xca7ffabf1ced3d5e, 0x3}}, {0x7, 0x3, {0x0, 0x8}}, {0x100, 0x101, {0x1, 0x9}}, {0x9, 0x3, {0x2, 0xffff}}, {0x8000, 0x5, {0x1}}, {0xffff, 0x6, {0x2, 0x3}}, {0x5, 0x1380, {0x2, 0x1ff}}, {0x8d, 0x0, {0x3, 0x800}}, {0x1, 0x0, {0x0, 0x1f}}, {0x7, 0xffff, {0x1, 0x8000}}, {0xffff, 0xa3a, {0x3, 0x3a76}}, {0x8e, 0x7, {0x0, 0x7ff}}, {0x9, 0xfffe, {0x2, 0x9}}, {0x2, 0x4, {0x3, 0x4}}, {0x8, 0x64, {0x2, 0x2}}, {0x9, 0x400, {0x3, 0x7}}, {0xfffe, 0x9, {0x0, 0x65}}, {0x0, 0x9, {0x3, 0x7}}, {0xc8ce, 0x101, {0x1, 0xb51}}, {0x8, 0x2, {0x1, 0x7}}, {0x33, 0x200, {0x1, 0x7fffffff}}, {0x44, 0x800, {0x0, 0x3}}, {0x6, 0x9, {0x3, 0xfffffffc}}, {0x8, 0x3, {0x3, 0x6}}, {0x3, 0x0, {0x3, 0xfffffff8}}]}}}, {{0x254, 0x1, {{0x3, 0xfffffff9}, 0x80, 0xb6, 0x4, 0x32c0, 0x19, 'syz0\x00', "0940d4657795a30fafa17b89b41b917fd24d0b32cd8f6c6697e5d6239763e09d", "1e5d232a15d75d1c1623e06b9b4cedf5d1bf330dc2be01586ca3ea4077430e25", [{0x1, 0x4, {0x0, 0x7}}, {0xffff, 0x31c, {0x1, 0x800}}, {0x2, 0x0, {0x2, 0x8f}}, {0x2, 0x401, {0x0, 0x2}}, {0x1, 0x0, {0x3, 0x200}}, {0x5, 0x5, {0x0, 0x1}}, {0x9, 0x5, {0x0, 0x1f}}, {0x7, 0x6, {0x3, 0x1f}}, {0x0, 0x5, {0x0, 0x4}}, {0x2, 0x7, {0x1, 0xffff0001}}, {0x7f, 0x81e, {0x2, 0x7}}, {0x9, 0xcce1, {0x2, 0x5}}, {0x3, 0x20, {0x1, 0x7}}, {0x400, 0x5, {0x3, 0xfffffc00}}, {0x100, 0x6, {0x3, 0xd0f}}, {0x4, 0x3, {0x2, 0xfe73}}, {0x2, 0x9, {0x0, 0x1f}}, {0x3, 0x101, {0x0, 0x3}}, {0xd829, 0x2, {0x52a171f94a32d8e2, 0x101}}, {0x3f, 0x9, {0x3, 0x9}}, {0x2, 0x4, {0x331f200e45e60821, 0x9}}, {0x800, 0x82, {0x0, 0x86d4}}, {0x8, 0x1, {0x0, 0x7fffffff}}, {0x1000, 0x400, {0x3, 0x3}}, {0x7, 0xfffa, {0x3, 0xffff}}, {0x8, 0x0, {0x0, 0xdb}}, {0x5b06, 0x8, {0x3, 0x88}}, {0x6d5c, 0x1, {0x0, 0x1}}, {0x800, 0x8, {0x3, 0xfffffc01}}, {0x0, 0x401, {0x2, 0x1000000}}, {0x4, 0x9, {0x1, 0x6}}, {0x0, 0x5, {0x2, 0x14}}, {0x1000, 0x101, {0x3, 0x7}}, {0xfff8, 0x1, {0x2}}, {0x1, 0xc65, {0x3, 0x1}}, {0x8d, 0x5, {0x3, 0x800}}, {0x81, 0x6, {0x2, 0x6}}, {0x20, 0xffe1, {0x0, 0xffffce86}}, {0xb751, 0x1, {0x0, 0xfff}}, {0xafa, 0x8cc5, {0x2, 0x9}}]}}}, {{0x254, 0x1, {{0x3, 0x6}, 0x1f, 0x1, 0x7, 0xe9, 0x7, 'syz1\x00', "7d8a31a473fdcf824a9a86051909e20042c42b5cf1c6b12661e6683879d1abab", "35000a2e7a497e821d1ab19f1d32bec5c08531a1376a7017b80e45a2ee06a05c", [{0x1, 0x4, {0x3, 0x5}}, {0x2, 0x0, {0x0, 0xfffff6d3}}, {0x3, 0xfffb, {0x1, 0x7}}, {0x3f, 0xff, {0x1, 0x6}}, {0x2, 0x3, {0x1, 0xffff8000}}, {0x2, 0x9, {0x2, 0x5a}}, {0x0, 0xa69b, {0x1, 0xe29}}, {0x8, 0x5, {0x1, 0x5}}, {0x9, 0x61, {0x1, 0x7fffffff}}, {0x7a, 0x20, {0x3, 0xb0}}, {0x13, 0xfd0, {0x1, 0x1}}, {0x1f, 0x1, {0x3}}, {0x6, 0xd735, {0x2, 0x800}}, {0x5e, 0x7, {0x3, 0x40}}, {0x6, 0x6, {0x0, 0x4}}, {0x1, 0x670, {0x3, 0x30000}}, {0x101, 0x6ed6, {0x1, 0x5}}, {0x9c, 0x5, {0x1, 0x8001}}, {0xffff, 0xff, {0x2, 0xfffffbba}}, {0xae0c, 0x6, {0x0, 0x3}}, {0x7f, 0x401, {0x2, 0x7fff}}, {0x101, 0x3f, {0x2, 0xffffffff}}, {0x5, 0x1, {0x0, 0x80000000}}, {0x1, 0xac98}, {0xffff, 0x1, {0x3, 0x80000001}}, {0x8, 0x2, {0x3, 0x72}}, {0x9, 0x5, {0x3, 0x1}}, {0x9, 0x1, {0x0, 0xa3}}, {0xec9, 0x3, {0x1, 0x2}}, {0xfffa, 0x40, {0x3, 0xffffffff}}, {0x58d, 0xce, {0x0, 0x5b}}, {0x7, 0x4, {0x0, 0x35}}, {0x6, 0x5, {0x2, 0x100}}, {0x101, 0x200, {0x2, 0x3}}, {0x3, 0x80, {0x0, 0x5}}, {0x3, 0x1, {0x3, 0x3}}, {0x1000, 0x6, {0x3, 0xd4}}, {0x7, 0x8, {0x1, 0x81}}, {0x4, 0xffbd, {0x3, 0x1}}, {0x23, 0x1, {0x0, 0xda}}]}}}, {{0x254, 0x1, {{0x2, 0x3}, 0x7d, 0x1f, 0x2, 0x7f, 0x1c, 'syz0\x00', "2db3339f68f329b19b28c0deade6d671b6557e07fce69fce0d90620d0e44bc1f", "512e612ab0edcc02a1e43429e9164d5d7520f69cfdd4fc95ae24fcba67ee34a4", [{0xd858, 0x200, {0x1, 0x2}}, {0x32, 0x8, {0x0, 0x5}}, {0x2, 0x0, {0x1, 0x4}}, {0x3, 0xfffa, {0x1, 0x1}}, {0x8, 0x1d, {0x0, 0x50}}, {0x2, 0x6c3a, {0x1, 0x2ac}}, {0x3f, 0x7f, {0x0, 0x7fffffff}}, {0x855, 0x8, {0x2, 0x2}}, {0x1, 0x400, {0x0, 0x101}}, {0x64, 0xffff, {0x1, 0x88b}}, {0x7fff, 0xff, {0x2, 0x300000}}, {0x9, 0x4, {0x0, 0x13c}}, {0x6, 0x8e81, {0x1, 0x1000}}, {0x80, 0x6, {0x3, 0x5}}, {0x7f, 0x3457, {0x1, 0x7}}, {0x7, 0x101, {0x1}}, {0x0, 0xa0, {0x0, 0x7f}}, {0x1, 0xfffa, {0x0, 0xffffffff}}, {0xa28, 0x800, {0x3, 0x5}}, {0x9, 0x4, {0x1, 0x9c6}}, {0x7, 0x0, {0x1, 0x5}}, {0x2, 0x9, {0x0, 0x2}}, {0x800, 0x401, {0x3, 0x7fff}}, {0x4, 0x18, {0x1, 0x7fff}}, {0x9, 0x1bd, {0x0, 0x5}}, {0x1000, 0x100, {0x1, 0x5}}, {0x400, 0x7, {0x3, 0x7}}, {0x0, 0x7ff, {0x3, 0x5}}, {0x7ff, 0x3, {0x0, 0x9}}, {0x401, 0x5, {0x0, 0xffff}}, {0x7f, 0x5, {0x2, 0x7}}, {0xf591, 0x3, {0x0, 0x50000}}, {0x28, 0x8000, {0x0, 0x80000001}}, {0x401, 0x4, {0x3, 0x7}}, {0x8, 0x2, {0x1, 0x40}}, {0x0, 0xe000, {0x2, 0x9}}, {0x9, 0x800, {0x0, 0x4}}, {0x1000, 0x5, {0x3, 0x1000}}, {0x0, 0x1, {0x2, 0x6}}, {0x7, 0x1, {0x2, 0x6}}]}}}, {{0x254, 0x1, {{0x1, 0x20}, 0xfb, 0x9, 0x401, 0x3, 0x8001, 'syz1\x00', "924c4c559f294383c2c0e56685e5fded3067732393149bdcd5ba04fe6abdaaed", "0ce02916c5a533de08ef47ff6f9f89cbf405a260d298e8209c2c1b1a88ae6945", [{0x200, 0x4, {0x1, 0x40}}, {0x6, 0x101, {0x1, 0x2}}, {0x3, 0x100, {0x0, 0x3f}}, {0x3, 0xe1, {0x2, 0x20}}, {0x2, 0x5615, {0x1}}, {0x3563, 0x14, {0x1, 0x8}}, {0x5, 0x1, {0x2, 0x7ff}}, {0x14, 0x4, {0x1, 0xf6c3}}, {0x4, 0xd211, {0x2, 0x6}}, {0x200, 0x101, {0x2, 0x1}}, {0x8, 0x3, {0x0, 0x3a3}}, {0x81, 0x5, {0x3, 0x5}}, {0x5, 0x400, {0x3, 0xde}}, {0x5, 0x8, {0x0, 0xff}}, {0xffff, 0x3, {0x3, 0x3}}, {0x0, 0x7f, {0xc3ca80aadce78c97}}, {0x6, 0x6, {0x0, 0x8}}, {0x6, 0x7, {0x2, 0x5d4b20c6}}, {0x6, 0x1}, {0x9600, 0x5, {0x0, 0x9}}, {0x0, 0x7fe0, {0x2, 0x4}}, {0x0, 0x7, {0x3}}, {0x8, 0x5, {0x3, 0x401}}, {0x1, 0x1, {0x0, 0xd6e}}, {0x4, 0x1, {0x0, 0x6}}, {0xf7, 0x4, {0x0, 0x80000000}}, {0x0, 0x8, {0x0, 0xfffffff9}}, {0x4df, 0xfff, {0x2, 0x10000}}, {0x6, 0x2, {0x1, 0x3}}, {0x80, 0x1, {0x2, 0x1}}, {0x8876, 0x2, {0x0, 0x80000000}}, {0x2, 0xfffa, {0x3, 0x9}}, {0x81, 0x4, {0x1}}, {0x3f, 0x3, {0x3, 0x7f}}, {0x7795, 0x40, {0x2, 0x7}}, {0xffff, 0x3ff, {0x0, 0x1}}, {0xffe1, 0x2, {0x2, 0x9}}, {0x2, 0x40, {0x2, 0x2}}, {0x1, 0x40, {0x0, 0xfff}}, {0x1fcc, 0x2, {0x2, 0x9}}]}}}, {{0x254, 0x1, {{0x0, 0x8}, 0x80, 0x9, 0x1, 0x6, 0x1a, 'syz1\x00', "787469e6ea37c69d5500f77d861f03e8212ef6a45a6f1d4d3e35bed15794e255", "cd51ee208ab0dc5b310a78823ccde9252f78308824d255497c2d22147b839212", [{0xd0c9, 0x40, {0x3, 0x80000000}}, {0x6, 0x7ff, {0x3, 0x400}}, {0xffc0, 0x6, {0x1, 0x7f}}, {0x8, 0x1000, {0x1, 0x9}}, {0x70, 0x8001, {0x2, 0x200}}, {0x400, 0x6, {0x3, 0x2}}, {0x1, 0x1f, {0x2, 0x7f}}, {0x3f, 0x7fff, {0x2}}, {0x5, 0x9, {0x1, 0x6}}, {0xfff9, 0x100, {0x3, 0x3f}}, {0xfe0, 0x7, {0x1, 0x9}}, {0x81, 0x5, {0x1, 0x68}}, {0x1, 0x9, {0x3, 0x9}}, {0x1, 0x20, {0x3, 0xa52}}, {0x800, 0xac, {0x3, 0x4}}, {0x7fff, 0x2000, {0x3, 0xc0}}, {0x9, 0x1ff, {0x0, 0x9}}, {0x6, 0x8, {0x0, 0x49}}, {0x5, 0x401, {0x3, 0x3}}, {0x80, 0x5, {0x2, 0x2}}, {0x1, 0x4, {0x0, 0x3}}, {0x8, 0x9, {0x0, 0x81}}, {0x5, 0x4, {0x1, 0xb08}}, {0x3, 0x8, {0x3, 0xfff}}, {0x59, 0x2, {0x2, 0x10001}}, {0x5, 0x8, {0x3, 0x6}}, {0x80, 0x0, {0x2, 0x5e4a}}, {0x9, 0x1, {0x1, 0x1f}}, {0x40, 0x2, {0x1, 0x1000}}, {0x9, 0x20, {0x1, 0x7}}, {0x3, 0x8f8f, {0x1, 0x80000}}, {0x6, 0x9, {0x3, 0x9}}, {0x401, 0x1, {0x1, 0x3}}, {0x5, 0x21e, {0x1, 0xcb}}, {0x100, 0x401, {0x0, 0x6}}, {0x8000, 0x6, {0x3, 0x6fff3af6}}, {0x9, 0xf801, {0x3, 0x20}}, {0x8, 0x8, {0x2, 0x1000}}, {0x6, 0x100, {0x2, 0xff}}, {0x3c2c, 0x9, {0x0, 0x3}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0x2, 0x7, 0xee4, 0x0, 0x26, 'syz0\x00', "fc3af339d1ecf1d61d2c6bcebfcda638f248cad4c7088775ef0e81e8654035d9", "1b517807ac5ac215970532991c5ba99be36d5d60f1bc3d5cd7dbb940e873705d", [{0x9, 0x0, {0x0, 0x1ff}}, {0x2f72, 0x4, {0x2, 0x81}}, {0xf9a, 0x1f, {0x3, 0x1}}, {0x7, 0x810, {0x1, 0x800}}, {0x100, 0x1, {0x0, 0x6}}, {0x8, 0x9, {0x1, 0x1}}, {0xc7, 0x9, {0x1, 0x400}}, {0x9, 0x9, {0x3, 0xfffff7a8}}, {0x8001, 0x2, {0x1, 0x8}}, {0x0, 0x400, {0x3, 0x890}}, {0x200, 0x1, {0x2, 0x3}}, {0x70f0, 0x3f, {0x1, 0x101}}, {0x2, 0x2, {0x1, 0x54f9}}, {0x0, 0x7, {0x3, 0x7ff}}, {0x1, 0x4}, {0x8000, 0x8001, {0x1, 0x8e}}, {0x4, 0x8, {0x1, 0x401}}, {0x3f, 0x3, {0x2, 0x3a9c}}, {0x8, 0x3, {0x1, 0x3}}, {0x8, 0x3f, {0x3, 0x7fff}}, {0xfbff, 0x6, {0x2, 0xa28}}, {0x400, 0x4051, {0x2, 0x8}}, {0x50, 0x3, {0x0, 0x8}}, {0x4, 0x200, {0x3, 0x7fc000}}, {0xc5, 0xffff, {0x3, 0x40a0}}, {0x0, 0x6, {0x0, 0x401}}, {0x8, 0xe887, {0x2, 0x7}}, {0x9, 0x7, {0x1}}, {0x20d8, 0x4, {0x3, 0x800}}, {0xbaa3, 0x5, {0x1, 0x10000}}, {0x401, 0x6, {0x1, 0x2}}, {0x8, 0x3ff, {0x0, 0x1}}, {0x8, 0x9, {0x0, 0x40}}, {0x0, 0x3f, {0x2, 0xfffffffc}}, {0x3, 0x2, {0x3, 0x2}}, {0xffff, 0xff00, {0x3, 0x7a3e}}, {0x1000, 0x0, {0x0, 0x6}}, {0x9d, 0x329f, {0x0, 0x200}}, {0x7, 0x1af, {0x3, 0x1}}, {0x9, 0x7f, {0x2, 0x1ff}}]}}}, {{0x254, 0x1, {{0x3, 0x6}, 0x81, 0xf0, 0x5, 0x2, 0x14, 'syz0\x00', "b2ff4ffa77f6e3e4e88d5a1faabdaf81cc8de099aeff1f6e612745b742b94c6b", "81d9b37592545f2915b0da541e264c63ff06123abf1be5a10a8eba3ac1ab7dd8", [{0x76, 0x80, {0x1, 0x7f}}, {0x401, 0x0, {0x1, 0x9}}, {0x4, 0x100, {0x0, 0x10000}}, {0x2, 0xe44, {0x1, 0x2}}, {0x1, 0xffff, {0x2, 0x8000}}, {0x200, 0x73ea, {0x3, 0xfffffffe}}, {0x1, 0xffff, {0x2, 0xc16}}, {0x2888, 0xf83, {0x1, 0x100}}, {0xfffc, 0x1, {0x3, 0x2}}, {0x7f, 0x8000, {0x1, 0x1}}, {0x7ff, 0x9, {0x0, 0x7f}}, {0x69da, 0x9, {0x0, 0x3}}, {0x3, 0x9, {0x0, 0x7}}, {0x7, 0x1, {0x1, 0x3}}, {0x4, 0x9, {0x2}}, {0xff, 0x101, {0x1, 0x20}}, {0x8, 0x101, {0x0, 0xffff}}, {0xf31b, 0x0, {0x2, 0x1f}}, {0x6, 0x1, {0x3, 0x252}}, {0x20, 0xf18, {0x1, 0x1}}, {0x84, 0xbfa5, {0x1, 0x1}}, {0x0, 0x5, {0x1, 0x4}}, {0xff, 0x5, {0x0, 0x7}}, {0x80, 0x6, {0x0, 0x9}}, {0x1, 0x400, {0x0, 0x89}}, {0x7f, 0x3f, {0x1, 0x80000000}}, {0x0, 0x4, {0x0, 0x5}}, {0x8000, 0xda7, {0x3, 0xfff00000}}, {0x20, 0x9, {0x1, 0x7}}, {0x1, 0x2, {0x1, 0x9}}, {0xb78d, 0x100, {0x2, 0x9}}, {0xb70, 0x7fff, {0x1, 0xfffff000}}, {0xe653, 0x2, {0x3, 0x5}}, {0x0, 0xba, {0x1, 0x1}}, {0x3ff, 0x0, {0x2, 0x8000}}, {0x800, 0xe5e4, {0x0, 0x3}}, {0x8, 0x3, {0x2, 0x20}}, {0x0, 0x0, {0x1, 0x4}}, {0x4, 0xfffd, {0x3, 0xdf5}}, {0x4, 0x1, {0x0, 0x2}}]}}}]}, 0x175c}, 0x1, 0x0, 0x0, 0x800}, 0x800) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r2) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff3000/0xa000)=nil, &(0x7f0000ff3000/0x2000)=nil, 0x0, 0x0, r3}, 0x68) r4 = getpid() read$FUSE(0xffffffffffffffff, &(0x7f0000011900)={0x2020, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000013980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000013a80)=[{&(0x7f0000001e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003700)=[{&(0x7f0000001f00)="6685bb2e72c0328ba94e371b02c24b9445c6e7d3e6edc495a26d2fd55604643764457ae10d01d688e5b85e8264b6eaeca9a07da2a814ed0a09892fec8c42adbf00ada715e40a16d71872ba3b1d7d62a5d8fc69b39925b4abae6c06006caf03deb8b2c680b226401eac873fa001d8b06caf1f3ed56b62028f121f9e7cbee29fc753f3b270af2710c8ab33118cabe51c31be3208994ab3a94c860da986134b089a8ee43b8dd044a67b75782c34f899db362120fbeb41c57a8309fead5b19590d398f9477e9", 0xc4}, {0x0}, {&(0x7f0000002240)="8e57153dc1fde5c1db76e7f1bb3ac98041afa743cdb02a95239351cd6ae3ceea52bb02192d2983e066e7acf4695af98bac4eb1031469c75ac3a89c28a9a31adda1184302168d6c33f3a5f5bd43d2275686c5c0427578ac4c07d9bfc9ae96fd8031c8d0fd824a54443db4d8f9f5b99f4f546a0cde7d5f9e404dece938e234c7da27258e17c45b8a494f2e689733ee", 0x8e}, {&(0x7f0000002300)="d7a00f384a3d553999e1b12d64696ba465c9dcc9a7b5dcb5e2b51e0143b9ccec18c72ee0a0288693224180a84829352f25192a890ac0cf3ef647c93c3de0fe4f5a97879d8460ea5b65f7ffdce1a098a89d6d40bdd5ccc12f1b371d36c2db3a16e51e050759e5711e8cc701079d62a7eb9553237056b4baf431bb3c2fbb8a9017be43a2806fbde66f838cccfcd112e1f3", 0x90}, {&(0x7f00000023c0)="c02f5503918d46ebf31e8f7d5759bc6ec830083b932d685f1aa979a613ebeeb2dcc5d57679027e078bab322cfd3f9502e4b554bf26a616a5e5549bd28a97516c2792a96b7f0f72097c57e2848ddb4fe3488be5e2287842a93d9b3415c7819f04785996c06049d72bfe5cb8d1d8d480a871d19419ddc717a0a259c56a8aa55960ea3690b7e8f411e74e0bb94c3dc58b71561fb9d18458b47273ccc681d6f04022c7622ec581e089ac674780674dcb33bf8adcdca48ad6bda873afe63a4eca4fee1aec291f96", 0xc5}, {&(0x7f00000024c0)="dd1e09076a9152617dcf226c4cb3afe2b9833fe42e7d2b8f74ee12deae130eb66227534ff7764cef3113c03dd1659919d10ea5f749a7849e22044467affd9f3be0eb2b783331f775fe3b988967c8d645308bc744c6065bb11cd50a1a2288322f38dddbb077d2a55a7aec19898f0e1d4c871239c183127d5600ca7730360e98d1e0aed5dc8232da1f1c5227cdfed1dddded4b42354090f47c0dcb6b4ccad46dab033627e1637984b4", 0xa8}, {&(0x7f0000002580)="af4b304ae8ced897839791a7bdc07d4b8cea150ec20dbcab63f7855d51a92b131c1aece3cfbe8266a27cb16b196ce12f21a78ddbe2f71b14252cd2f26df1974a667711eeda8838584163b978657d24478aad6d346d1b0932abd84e02d1b12673502bfcf5ab0c309d74a601f093b7fe8c5d837511a1d6faf2e2ff34192fd657b20cf551e02f222283eea0cca7fd7c1d8084d415a072b54bcbfcc8a49fe60c080bc5dd29e50c620a024628a6e98939cd9b85c646caf515b12ea60ebb4b4b4c0812a2517fc7b5fdc6beb1e6b3c2db94a2f290c8d86ef89a4e7255b95a45bcd0fc7cc8998ffcffbcad1507ff79323487547ddc3acc522c617a44b62d5ce604fd2c014437997f1fbb4b899c2c2ed5786aaf0f9c3ae281b70f61820203a703b13a1760d019c564f20b98a28e8c6fc7068f456028e49b8ce74817182702c5899617c89900fa7b0d8353c9af2d02f3ea93104a5cb5f01c6a4fc4bfc90f2958ca5fb488dd93c773f8a5c33ac3032f300374457eecf5261c3d18736f5f63f5868b9dfbfe7ef3aa4ea8d02bb2d6966dd6f1c1a3863dec5bbfa1ce490e4ca285541c67db9b2688ef656702ef846d37497b5482a09047f0f35a557480501de0f53bb5a0eb6120eb7d3c93ba2728726c787355651c5aae0aebf90465d8010b2560e453febb80ce6bc4f9d0e3f6d6e7fbbd81318aec5bc3c18f9febad1c92b72f2987ac616d65302d530c72ada74e93ce463b79338b0f66c2c84a16d61f86c3b9d23bc7a6581985ec1f6cbca0d361885001d485e19e86599510aabae1ffd604ee5861dc730ac66c418c5d20415688cb728fff380a653003f2ea1752a4b931cf38ecd5794507dafaa7e53b0539285b4260a1d1168adc0014c8a9d63606616f9dba898c82ada0589a07e209ecfb9ada11db1460a0f77e2a20268086319feb3fd803686043e258ededb4fe4a992907a250b05bfdba998c2225d3f523d2820b213045864c4c05a813e072ece90562a51ec5c3e1e6cf6c9f77bea4608ede69b4190b72a091a32bbccf67a35bcc2827875bf0abf208e1cf1b3c04a280656b852ec1d3af9f5c683e92f820a0eb74ab4db81ed8e0d61311e62f08eaf6731e01885fd6f4a1899286c63b9eb2b7428fff149ddd37aa6d95165b494ba94dc58d6457ef45b741ab479056dd1a4ff2250da9768f14de04688a9564c787a3a60edf8982bb9a3ef9cf7603353666743a8c6a360ef042cefb66c14ee3f51677348966f2149aaa5e4608a58251a23cd02e8e0ec8419f03fd2a29519312f201817ea36ef13413b30114a19ef7b8c0182b1aa18e0a85689b6ddbf753f4542db5a3ddd168995ee8d0b17908265c6e2269b6ed47eec896bdce255f768ac191839509078f2a0179d10482ba4a6d83ca6b1e6b69f2085e091c8bb07948915246b2fabcc263fc9a7235d4fe75ff0e6fbc6b41c4f308e8675a0a9cf91d2bf4de08cedae814fb41e92c9ed6fece1b8cb3fd4750f3683307d928b1d1426d15def8a320e9a89eb147f5d716a803988ec093d2db17b76d4795715b2ed74174c3dcd27db2a1dcde9210bbc5094744078b15ec02caf8b4f7b2808d31d04e69853548aa8f459d293d84a2415594b3fca0372e68a7fd7a0296a14607c67623fb601a8d8620d7fcd2e0d848efc718a4f2568b06c49dd85f420edbc4af48bcdf259013d9a85ce8c30b1631f432c3b637d35ab17098fb2e275c8819d6a2c1ba2b31534b1fb1386e36325fc37df52a065b88aeecf93761ea1d9ceb117b269b53e3e0971beb6402f58b44ecef24a74a49f48e19d98c74ab349fafba0cfd26a21485845a72b9a8fbde9015ba17db6b727c3ae2806978f9871caf4dd5fd01a38f4b6499e0b4ebf8527506f453f611708d42bc43e2feb80ab573888d036ad96f7d330653f5a06f90ae0ee0ba37d3b21a9f1c0187e0d12c1a6476d342c7523e5e73e3e2271a1a9cfb1b0ab5ee2815b408ec07c4eff217bc0ee52df7546ccc84b6de33cc5d6a364e89b1f2a6c8c823069ef70c2d64a6a7abe4643b26eef7ee82bf7edcf6a85be1206b8c247b0651ed65466ae3fbd9f407160edfc35dfe97816703220584333a1cff538e11a55be6ef0ceb3c6c18713af8cd7053753e65c16d8bbe942e0385b2ff7f0b2a626c9b3f5903af3a4e54f7813513a3241b20a6e67bf9a910e6b7cf856ccde0a160d77d8023a65b0e73c6ff8d80cf27ca65947e5ca9e0722841a19a580a2a097d1c26b7dcfffe7a7594cd1fe44d38b66471e16fe75b551b8d19f2358c7451ffbdaf304bf000054ba451317c53040f2bfbf0d3d3c3203a0d243c161eb2d5af35e93f5ee73d083c6bfd4ae2b043a6ce9a426bfd1d222fefddb9bd493205d110602fcfd59606b4c15ccc873764ec2aca2165c9a9140f5d9561ccce4da228837929960517058107a947c9c620fd3470cd223584d972b9d17a9616b94c800e3db1a5537cec9a8239c2bd98d502256b6884a65109143cfd2cf6d2616067798cc87eee4850471f3e0a5d53d638215910b8c31de489a57a7703094b6b1974e50a5add6f8ce82637d7daadbc5f48b91181f504c90fc9bd5f9657c567153aa5194aad3208950198f341d99e0a7883c9508652418bf49ab811c857259acd5874643acfb23babf0b5cd5e0b03a06481a70b0f18e9fc335c5eea58ed27a8602ad68bef0dad0b0a8c058eeb9e8cad8a5e1e97882acf3751998c34e53eaccbb761e4c2652e9f210f4960501334a07c1f76012c30bddcc5d3b85cd901df233e8fd3da2d045bbb78304584e1e7c277347ecd552e73549dde9f6948df58c0651d2aabed3b18d16be92dea7302886dda669ddba93e98cb4c97d34bd1596707f0a1f164336c5bbaf23699f8d1dc6003caeede8fc40e2038ace2296f3e3f0dc0cadc2fcce17c3b302350415f90f667dc4a742e66f369ec2169bd32e9e6bdb83fdecfc2e47cf32d804993dab424a34fa24202d32eacdf11181d867dd4665a61cd9732397c087b4f065e6cee6036f86bcb075fe8214ff6994e73d756cc969b4858b413861b512d77ddf98b5d0bd9df0efe48361b262a630cbe3478719e0a6237cb10b4ee2cf977a1b2344c5377506833e3b9225f8480c8109de40492f0b847ac694f2d9612ac8ea081bd997504044dda072bc890c14f2e321487b7690319470222d09c7194ec08032389871dfe5185e8942c62670c5c30e2e66bae552a079532774b9424e70dae10a82b7c67a8e1d70d2963bd2829c91f9725db57ff430de13af56497bc2b31ed919a6142e84174c046b70793a250ca15ed095359d41bd249c8e173602d7ae701a69ec7bd391f8469f77bfd76a5c40ae75cb2279b9ceff021d04574a4623ba738a78f0665d6c5f3a564be206e6b5ad61934132342f593daaefc751772795d065a5177bdffbf7c036d76f615145b3f2dd3237ca608541a6b6f37d3665e70c03f75103ec7ca7909924c3bd5d58938b87c7fc9e33e28e70c8918c0597d867ad3e9bb98c3d890f447be1752af09b4af3e1dbba7897ef1f5d3ee5c3a01af8cf2664c3e3bdf2092446f9204e58ecf5afb8f2b7532d25adb20a93236c4945fe3c44bcfc15f82087af8b67b1bcad3f46a0a26133d6cec6dff34c481e3b73068f3900356ce7b539e0b9c8325f4a3b22ae265125aa4422f7901ac3020cc81acd4323e8f8be3e659f38044471d5ab6a348113bd6b97fcdf2369a090a78ec70e81deedbd93166a24ee8c0936ecc50259b3353332749c870537230d5150501652f9a4f3b4dd71149586365a1858a418a46e946d96cc6f37cba34f0e9a63abcad54c6d7f9d8335b536d0f81bd79beba1279d6398c1ca0508d2ec5459fe063f319d3080e054134cc86274f2d891e05f4e4c7b966a8cac983090b9a2f5c8ae3066f07c28fd0016b9598a015dcfccfb3fd5b8337cbb21dca59fd705791304fd1c9cff643bd86f406cd28671ead53701266197eb7be684414e05f43869a6ab0fd27841a018a7db6b5b3bf2986e20338115beae3f8f8b4df3188e3020a080fb5ca2717734e9b77521a5dc7ccb696fffdb60860ad0f3c3f9bc06eca510748ab4bdd50d101376df84985ca28f86f9d43ebe28615d4a54517a4f8c88c7da5e703a04f06468932f07f6415da62d2965b7149d64cb86cc23d9f0663c41a9db2388073cf5223fea617c1c06e6c9144786e106e0f3137aacb6c9c03c08f0d7b08ac70ae9a8e00861d3975345547e094949b0a9385c8b23a417469db5a68dfa96945c063cc016afc3a33c3ae251afbc70a5aab60f859fd841b1ecffed58f123fa969f7683fead1c1e1a88cf292db97c43ad19ac39b0c9fa5807b760274d0b1679006b9dc88d2c09704329252ffaca337d47be228c850d78ecfb1c89a725c3d3e1a7cb6f2954c5d9a6feb5f011e6c6803944f77a1b9b0b5e6cd492aa3c74d2f21a7d64032337b9dc091d3880f5c1ff0d2ccffff2767a723c56c42940b86f1b696f8a462c5ce99b77ec835496e73731b2b89426b2895f2b8706c9702d908570adbd3428b921657f88d9f01cc2be9491d0d1ef67f9ecd85f56c0fe2ee7a403b5fc8df8178895a801a5499a645cd6962ddf63b9c1a3dffbf2934da5160befcc59b53c469b11094ebf74d897cc240eda4c1430e0bcb4aa55648534213a089a2a2d530b8f400e61ca6aec35c15f7025928fd22c066e2b5235164a7fa6ec42c43200a5d09dab2feb7b5dfa8b485bcaacefaf801941924bfd16d9979fdadfd5bd609b73e673006c52f37579a1d9fb234300bfc521a174b6aeff0cf946522082a5a1bdcc095c59e486b89a7f8a4543e3171efb54ecffb4753984df9547efa189cefbb63776d37b0fc4fecc22450e9f949bf461b3c79fcdc7421b87daf777d157bf65676263398f83550ac66070be3e91d36d023c072d33f429b770508c9de9c8d99b39b2556ca425cee9f872dd9072b73456834cf66226c5b0f7054bf9ab04b3e96f5df83de3f3c694345495b2459b575995f9731ae35b3875c4d58ba8a298225040741737b8f7f9a9dc954ef6b03d40ef634e64d9ec86210185450792ff918b79267a306ce31157d4323", 0xe00}, {&(0x7f00000020c0)="fdcdc37e7f2562e93b72612ce5f1449a6bb25d78f9f33c1fde52b25a86c87c0b88b7c8ff774125aebc3180507b7841a220046255fc476d41edad3dec9bf8fab0bc5c4132ac9a9f5019aa1103f6461f12a067815e54c7343b221c0bc6b43b491cc31b937b6faf48fc5f7bf5", 0x6b}, {&(0x7f0000003580)}, {&(0x7f0000003600)="44ff4e9e6710570cce62d35ccf7eb7f2a818c2fd87465f113c193d47756f344fff3c7065bf11f654f6208eb1cf80bbfc604327399c797c3af7c4519179a6736cc01c555c2e529d2f7d7eb032bf7dac982bd17667271b02e628b92a64109862ba8588b0aeae0f3cbca33e46846c3ae2b55f768610d52b723398f88d73856a5cb0696f3aced12100ca542ed2a6972e7269b7a2d53a43acdf6693d92281f1bc34691daa3759781e660f8b4b64faa2f2e8b7f220619fb36058f4b05e5c01abc603c97de0feb01275537bcdee056c2ff679790566a79e02ac869e2975c5c1d35ecb55aa79716ca808c06251c97afa181b16cef44d9a3e", 0xf4}], 0xa, &(0x7f0000001680)=ANY=[@ANYBLOB="1c0000000000000001000000020000", @ANYRESDEC=r7, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="200000000000000001000000010a00007ad3dc6c2283cbd1253cd33313c7ae92547eab8d4d59584fd693f645ee12df1d624d9d12ae0cde813df3bf8830a9673fa6", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x58, 0x48000}, {&(0x7f0000003840)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004f00)=[{0x0}, {0x0}, {&(0x7f0000003a80)="8a948dc98de24837a0e51f6e1bd86d20af39701e46dd119b49cde7998c6854486d0cc002a301189e89b72591cff453bd1b001e44945c70fbab9c093849358ce10fe5e0a3cf47501695ce6934035da8cb77b2376c4357e39550ea7b0f1c38ba3cb1cf6360b87402e832de0c9f777165c18ec2e6f812c0079c67013c", 0x7b}, {&(0x7f0000003d40)="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", 0x1000}, {&(0x7f0000003b40)="6ab1f0f68f1dfab519620cc11a57de87c533f61ff5238791dfd92d5930ad7112d815fa9b695f2e1860f8788aed6d91e6d4cd4555ccd4570efd9d118668d9cf0c355e5f83e70a2ca6e13dfb0740e77344271b4d928358f5df5aebf280857a9976774990bf58a348fac3637fda3f203620adf2e5ae2f33b618c2", 0x79}, {&(0x7f0000003c00)}, {&(0x7f0000004d40)="58eb2233f5ee94ac9be134e73ab72907afc76c9978156e74ee2f06390407fb68fdd53191f4524516bd7697a64a220b540c693f06f706d6a8ad9ec405532bbcb799396cbbf60d2eba3126ef2ccd24620d927532c7ea309a17bfcdf0bc6b2a85fd0772ecb7226758530075cbdfab1aa5d8da301e0f1ee00af67f3711f4f5bdb2efb2b461261bf1a456e7c6d4be7a09c8f2db589697c637eaf58f454360582714b646f47c197422e3f3e8fef1c97b25660d", 0xb0}, {&(0x7f0000004e00)="bec3e951a618144564dd81140380d713c01beb32b43cf2ab03f6c834bf5e558a010f4b326098951f48c4a4617e8f39160e47f4f6e79e23eb412be1b9456762e8f9bf94ec08405dcd84201804962f787aba0953277cf9f189e0e9e33ea71a81aeec516aa201ead9add51d58126d8ca689dadd099d171ab01718ca39f1f4470302599ca86ec88d634f3f14d2754ccfb9cc1f29cd8041599d9454224de1d51aa5fb8612d595f4ee2845e54f55b642e7c0cf62745c42732cb968591b9a42e6f680fcd925b34e2c2045ca97b40228a376ecb686e9edec4054dfbaf8ff2264942cadbba10d8e36cb71345858166fe822de", 0xee}], 0x8, &(0x7f0000004fc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x48, 0x20008040}, {&(0x7f0000005040)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000005340)=[{&(0x7f00000050c0)="dfb5ab219f23001e8be53aefbbd127490a0f0df05f92a53a2b87c6eed57eda59dbf197e7099e8531cb454054c057df762a53a625b1a49c1f78a59646da1d51faa6996b5bd28369890aea0b17fba96ed9fb4033f8b2251d2e5d2c9796a08cf109a732f8a57a90acc0a9fe70cc9794a62e3c2ce330bd7caa722b285a0a644c07506e679525128fcbffd7d7813431e838463672838320ac7d49dec6f9a16c6afc0f1434807ba6c878dc4bd6d56119c32e62a23c2b8b505058", 0xb7}, {&(0x7f0000005180)="bf9740798671868b29fdc0ac2d5c050a8094f916c0557048afa11553c8fbfd9567b500e2e721a860a890ca323f20c637562463c68cf5c825dd43128485bc088785e9866588c0cad87b8ab997a7ef811e8ac313319eb1ee51bf44d06b5d33bda74427edb5a5af9c25c78273eec9843a360fde0f45325cd4d961003b207985a42122b71a9ea86ee342b8014b16966a50d5bfaa3dfb361d4f27d5667c823fdbdf676b870ed8b4abb7491093e5621a5b051ff3d680a37649071be85f292dfae736e72aae19630b2bf9f0d052b555335249e97c8d9519698cd543fa95", 0xda}, {&(0x7f0000005280)="9cf77121e91bf5d6017eb53cfea35e0d110c85fbdad54d10473e0022241d54f3f07d18738cc1980980279520065436730d5b2ecb2b6567c7e8ad67a4dfd55c82cf11b70a0ba5e5306b7e9901b9aeefb3d3e006acd42db9a991f82cc7d659d87b52c8e096a5b08dc16d486d87138d02de14d5085b82191f2ba4d53371f83957789e418f4c5317b0be19b0", 0x8a}], 0x3, &(0x7f0000007780)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c0000000000000001000000010000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00ea1d962b406b072700", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="000000002000000000000000010000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x138, 0x11}, {0x0, 0x0, &(0x7f0000007d80)=[{&(0x7f0000007940)="c6442fffaa42fa071ac1fee9188869ddcb7238aa83ef8ba5822fb55dc8bddc633c3eed2ca7cff91a0f81d7ba01c485e9f0989fcb516a303fac14033ea9936c8f6d7ec061a0631d38fd7bdca088d83e2281a04e0648e80d33f7ecc27a4b871f1f6903", 0x62}, {&(0x7f00000079c0)="8ce93bbe929335200199baca7cc8e15603f607c321d355cb2e05a09f08ea48e1f4757f45c4eab4466ed8bf3e2aad8b925aa3e684ca855d708c14", 0x3a}, {&(0x7f0000007a00)="f6c0f1a7d8c31f7df32c7612a04c9f840635d335f36ada4a8b4030812988e479d9df116fea604bc42aeb046c44e13809f405f54c7f399c46d5d15c32b917dc397f4d37f179b08dd62b17555960a04e0b522038dc0d7e1488f4b78e753bc649d21e20c73b9d235ac3579e1ceb8bedb876ad27d09e94fdacd0c636e0bc1ef93ae266c3bce9e891f1a394a4033c2a2ab1ec70932b5cf4db66f2e2c317149ba0f001ef578db8f6c182b4b871095ea91c1dc031aeaca1", 0xb4}, {&(0x7f0000007ac0)="c91aed8871ee9f44b723deaa0c5f6dff7ae1c7edfebd5263ff4455e37dbf30821b7b005ddb5bd653eecf643caa7789c8ade03542d698", 0x36}, {&(0x7f0000007b00)="f56cb21d8a5e00b64dba318dd25bd87fb22743c818d9b579065948b402d84a15ef0f50d407e468ac9e679ce4fbff8402282457d585eb89a2c1004c5a314e3b4b40231e47", 0x44}, {&(0x7f0000007b80)="17c4e280dcf1222a74d448f2b23a72cdfb9a22319c34ef1eb82b02063e0c6e110d444b176687f3d398a6c62bb47d1027dfcd756ce01e86fc507070c3a3cd94c1f73afdff245d6a8573c789ce1b8fa7f7f56dc7eaa28d746b23dd6dcc8164b6a5f1afb08c2867b3b393ea601e0ecf3f6085", 0x71}, {&(0x7f0000007c00)="0cad2f688a80c21e374e8ea9c65fba38c96ea0784cc632f8b9faaa98233442c861d9c2bd36bd5645042beceaf932f9", 0x2f}, {&(0x7f0000007cc0)="20cc689bc44f75db80d7a6f4f931b87ec7951c82f15b14d974f80f9cab577918df580e9614791f4c59f1cd1e24e7f7addd06f5a1b8ad86dccb7fd1c07b5c742fe8aecdcaeb3ff34ca39606cc4898e600d5a7843075bbfedb1b3e01424ff4c325e10504b044d0e96935e6c73b88a1ef934a958932a365486ba9d08a2be11ede0ac33b462074878bd75d6b4c49", 0x8c}], 0x8, &(0x7f00000082c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0xe0, 0x40000}, {&(0x7f00000083c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000009480)=[{&(0x7f0000008440)}, {&(0x7f0000008480)="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", 0x1000}], 0x2, &(0x7f0000009540)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}], 0xa8, 0x10}, {&(0x7f0000009600)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f000000b780)=[{&(0x7f0000009680)="a2253b1bf585c593a269c1082c9de9ff2ef54e6873af094a1bd21f09b72b1ec086580bbb9257ed6b213b4b", 0x2b}, {&(0x7f00000096c0)="bbaa8e01aa9f09347d90c54df0f3f018a71f88ec693792f0ebb7c2cadfa29ff704c1a9310deb5e63fdb552e57ed6e02e847dbb25c8d06d833e983fbf962622d61ad41f838dd1", 0x46}, {&(0x7f0000009740)="0e55bf8e533cb5c9aaf93baeeef959a2e0ad60b323a4c57571cd3814738c4721a6faea912f0bdcdda33ef2692e0c0b1087a7992aabb846194530b508e86e2ea8e76ac0a58ea4d7f684dba6587b9cd07909c035394a619a1a4fcf49fb4af1be51a5aaf5032c6b10a01b58d85bfe7a776309d300c9f425da8451a05e7481acf3abedbb5b8b1f1ea5347d3b452dfae6804c0cad1ba2fd8c98c85a6af2bbe1ae3aa720e295a57deef6710af3b953729b533150eb00bf5570d333b3f17bcaf923cf59a3840fd7ad5fb682efec9f83eeff3017795eadd2f745f4ae5477e9a2877e66b7f326fb610f03ccd2a0738fe95d75aed4897172cb7255c0ab47482cfd5b8e51b5eb49a050070b36c852688fe37a7a68d03defccc7c57f72dba66ae8f3afb7d1af0fc931d3c2e1bb649f1415b93481a5445f6b1b5645b75aaad1f8f95128376a99eec00b3fa735b6589932bcc99de14728b8d59addbd68b06164b3629f549f509057ec57797e9b30ec6486c23ac410035d53bfbb9e359451e0aa13867a3c73ffbf1187d6028dba334c413b36c19c7194a434d867efa1e4e782301de55858bddc69c4d6758c3080f2147e2e223c8953137af0ccb8912dd0beb2f2230c9c8938964870c302788c395b971aa58b3057c58981b974ae6e554d107b765f578070c9b9f5872a7b82ff996a2fc949fcae3629e828c020c4e5613ef91b3a142298347848cede419c918cf8adcc66d99f19697dca9c405497e90cb2993772f272c3600b40b5c131dfe56ee4085f45defcd8df667a9c8eb26929d8848aec728b7279b7e9d48bc2354c49dac3727f72a2667d8fc076292f14e2e2597c5539e56bb6ba2b6c0b567d7763ed1972325a5a9f615098ad42303db8a07b1d4411a1b99c9b35c60c31aa583e51eaaa1271f41e9d7db58748848667aab181bbd3d3797cf6431f2fcb197b0ef57ef69479db6b5dd77660f42936e529f910c0edcb9b41e4c72a6c2d47a4b824e6cfe4fd3e71da0aca7f0a17019ba01c708cf69d66beac3779190cdd4b70763c1400cd8cfa828db7bc8d5267f115c6a3a2cd780e9762c599bc04de5d70d1080a56c641d358af030ff467953487a998b9df00f202602c61bee1a4993d39d66e21502c4548c2348823117560c39122ba146f03d72a62925cd62e818456461e6ec28913782ca4562b5f0175d0ef65be5dfc3501be9e9b6eb9c79e9fc20be1766273d065eaed8f44a8a2754e3035933c49454a3f286d8c4dd8c542931008695c51fa6f8b625cd8a8b0b6cf55cfb76b509015739496a204bc43ed18eea5edf1e2734673e959b7722b6dac39c0e10077f3d150a9d23c5e45da3f1fc076ca0044b98dd280728e5b1eb8ffc7a602ee7c31a5f878e08504784e1e1bed9144bb7e16c0ad27f2721ab1d1b3ffe76e3ab67e71f0a54fa404a2b2747cb3ab9c14e60f435ad99d182efef901abe0f3bbf88e3170ebc2d4c2e7f411920aa1261b91f0cecbd01a5cbb578d2b5ef746064912fc5ec6ba90e3cfbe8192583eabe87a92e6297d87aae58ff1027195925ca6d3ddb7ad3e6edf8e876e75b625c0913f829aa94837339c9e98c78eb74b67d49367b8093fd67db6b60aba719c86c6b79a1439af3c7549fe7a2530ad0d75ec92b7c21b73768206eb03639863e7e6c51a3c29480db88bf613c662bc6e5915842fe653957d65641b1288295542d50dab11d862f3eb4d0ccd7049b497ecae919f35df80110f784375f74572fb90d36cbf719b62dcc8fbaddbfd36c9ca2f17ea433db86a46cc04039d2857d9742eed844a30f52b8e6a8197ecff9acd9a991b8ddfda8a21fd0910452983d3add81cca94428fa81d2826d5d6290fa8a3a7e532826c146ba526a8f26a6bec8ae9b2f5f3e90b2fbf2056ef47cf3cf7a5e39c4b7b15e5f56875cdf9d73f432a4cb207009ad35a2c18abb23a287f47793555c842cd6528cf85a617ce31f2d0ed7b9f8bcaeee4ac25b63800f54216449e07e3500234d10fe9c81074fc405e305d6d7efc5b10a0d2c2c1384672b995f0c87417dcc4083d12241cb1f9377276e9f248c7205b09c8cf4bce8615a15edcc78ee3ed1342d11ab54e872793297f8a5513bb88dd0579fc6a647873911979d5946f66d1d558697b1d7640f13293344c3df170ca606d34d42e3055a61033bde676e39b41332ca019f1f669b60c8ee174683da86d09f8def6cdfe9a00ecfe4dc9d3fb04463b343a82940936aa0ca4587acea2ef2da82033519e59a5b061a5bfb21793dffd0363c6a7e8f39dfad6d46037748b9ba9854fbff8c890927d5cdc3d3119e0437bb1000145b44ee81139e3ab13411c3c1d49dad4d8074fea1697e599020d2ca9d22cb628e62ab36ec8345ebcfca6286ec664e25b727df8645bf69e7ac80915ed5e816ef1a3fd79969eeff3b128747f4fe38d92eac8cf52a7b65b426fa613888b1055d8a6709c62b2878f5577dc937d999d5eb0c998d15062c0d6cf9fc988d038eb36eb7b658f212693e6089c7fc098d3ff34bc3f2f965a9f89feeb1f2b5f03532c39ba82b8031483ea247698d8f9fe0cf08308394c2bca595da1599bafe5b2f24059b88a7e2cac7fab106441c2c1196e00d70ea0faf3306c137307513478056cba5dc00b768e57c4ec7c66a85cda6e6d532bf0e811d8de1e2c64576c4d360e593543a1dd9fd252b290866c2266b5ec8d1b987b9543d55d6c10380fbad523eabfe3027b5c41ed72f510bf8a4f05ee97155bc8209f3315ead3c5b87b2df8f34b0b0b11e0f84168e66e3154cddebdf255c7f45e1b414ccf162449d81872f8a1aad518265af8139754f9bf848d353f948e2817da44bd5395539ab27dd16bbc7b9a61e99f9382d9819a60d7bd172ecf26f64f3547478b4d2851596d06a09d8c4835b0afc33dfa5154b20c99c07162081ea8cb748742825104d29b998c82525f67dceb20325523ef9ab2f1ec8721e4f0c2a03bd045d3b4f4e3a42010c48939d63228ea4358418abe7034219fa7a7548f25e8d0cd2891943aa6e4fed5203a4d1e3f76afa07fcc09da0842942bba45ccd58bdf7c622e2298aa9e6d539f8fd336f661b933c950d2fd294d0c0778b4918a89771318680435ccfb9b932357b57e3d6798cd9419bf8ec88826b3e4aa9a19b3a1848ef5915ad1d9c0d2fb63ca0e92fef79d36d179f56061f69ab8275e2d842bb414dec71ef2fa33ff63826b90a51e8f426b3d6154cd022ae707041ccf1139cd12e4e960c5ccfb0500d1e6f5567637df37e41355d0a338ea88c7bfef4960b7c8110c98183d41ae05c9a3fb6867dc2f187591a9b8214d2eb21fb4b6592aee045fe5dd00794ad0fcedf43ffd73c8bc26ea6dc1fa8c71bbc03844150a3706186109f96f05271f009770201810bd208ac6d2b39379150987aa4a984f2acf224bb813461c4c6633a9b91934a4619f368555f4b1877d20d51bb8a0c4571e186303d096f70fd0ba0ad8f0cdf159ba1f7b8006c5028ee3ce752810ac5b525f7fa0bd5eda18d50621c009a89fa06645df49010766eab0ddc339323871ab13848ce93731f8b4e42b526af48aa3365306c8606de7594f9ed4c1ca9a4f3c207158932b1bf5237dd9819929756d3540d2dbcad44b3e32c15df0f472a6c43c6ee63f184a2354f5d28dac08b4ebe584ba9eeb08c861d3b06abbe1b03f9839c19d1e9cbaedf4116fac04b9c192650a8248724f69d7fc5ac0da7f3ee919dd53d56f8e9fd430dfeaf511631030d3b9470e61956e773da6b6ed512f1fb5eb5dfbe9c4d224a97e92eccff05b5fee9d4b0afc4e6aeac45ba59e177a22086c9988cca8b4e7964e27576946b752c24e66a9cfac8468772edded3da7c820fa14124c62af3d267b59c622d496eaeb5eb0f607bd4a533f50359fdb0b7c1a8e85a6a08c1382a7e2fa709a8ecedcf2ca2c40f15bcae2101967231bbd6d275a6d18f4a23df2b3f0435b7f7df1f870d063b63dc600674ad7b395b049a9585cbc4b6e9b58b83ef55cf3b78564eefedfb64f53814f447f850e6a490a26dc224c93085f25fd144ddb1e73c64a354c8d87c4488300a23acb39241f8a2d600c8354dbea650e8e958ff28a4c8e1e7a10ca6ca5c4e003b614e353a65584f54a68bf21da25b9e0d30ba3cfd52085b8d8f56ec7fae9475df69962c58cc03b8c85aeaa62609a14803bccfe2ab005c415b25f0484f57b9b533d9576c1e7b15a5e0a4d42d608b2de340926e214c18ea07e473ef63716ce471a14aabc82c74de39be38cf5882a64006838a15155997d0e738158ee519966f4b9505aa64827098230f5f0837f6470ea025baafb8e3a2e31cb27ec5365362a2822cc930ae40daa62d6ff84b6faffb4312c66d6acc29d3632356ea7847032c36c2ea40058de5ca1d300876b55e99094138db487b62b9993f6324158d4d630be5ac91a87b7832f253c27b71da6dd25990a4d9af176ebab7db3b548552f012e5d838f83fccacfc465166369b8428bca96b852aa7a505239e66dce199f5d92ae872d6dccb88f5e6ec1294d19aba5d983db9986f5305b00e3297b2880971d5766195ba6e5464f469d006e9b110c20df033364b431906be55086868b3ef443533a18e2b1ed503543aa3006dd24fd2c4866368333770f938155ecf6622dd05ce5e389529eb3439da0c083426a181f706974a1d38e421c025a2fbd57a9885f373bd127be51ab2b567ff7b25d0fb965931c85313e3a6f2f42470a880328f9d41ba1e55e6428332320ff02ed6cd21079249ffeb8690dbbb88300c156126d8f554847b3bcd405e87f6ac64400b711f0ae7f2f4448b3fd060c3ba8c78aa4ba18b08d7640dcd7d04d013c4d9e402dfc5fa0b1ec4c9cf8db48c1f227c37beb7b516898f9db1d18089729ff5fbc82f094ab3bebf09b0ead2a821994aed2340b5e9aa7336a2106db3cc0c1697f206e57db3404ebf841cc27ea3b7538d9932b1ee9acdc79c6a3e4371bc915e4123ad47bd1f3fe161e78f3f8b5bd91200b642fe8ded293c52631ae947acdd9d4204190787c10d832bc80f70a8e6ab26d4ea58498f4c91da365e40ff51024b8dee90b891c61f7ca353fedb05bc7788d3f180e9730a54daf9caaeacd4b53e52bb20a95ed24e7b5ee5c4605e6c69dc98579b97d1161ed2bffcabd06f371ba676100aa094487075e13d5acb79ebe30afe40ea5f575cbdffd4314b6596c6b809010f049522961a43fcfaa8d2a71083da7fac4d984d1769ba4e411e4b0b9cb9cdca0a04ec9967c72e7a651288defaacc904d5498f3b2b531ec7f111baff6d7c7b23a9dc3d30e5bc37b408459032b54762e36ad14fdd324a03064061955c45babe60645fd3faa8f88a2ee68435c5c37e19519671df8a7a394705191c5a5a561c56e4df08ecc8d7c028a786c4901cb358aaa28dab84abcb9f9132d3098d6db9ef0d4baf80a4e1320aa01eafca79849c426a18f9d2f7092155b553a1d7057cf624918add1ea48147555a279f703e16d00c26378ac07f78c5052b711d440cf588579e06725393dbf7b790d9b693e5fd981b3d769bc306760ee1067954ea7d375ef6a5b056405585285854491609ae798a7daafd258fad256525a785a7090eb8f993c61c7fac6c6f0a48614c8840f9c1ac787555fa062a5db040bc82fed05e562f4934bfa149999abc4a5e06bae566462f3ddd3eee2644e78c8747309b7c436dbfca2776a844c552ad08441e25153b64da0a36dd82e09792a25e0f13be843617464ce0b957923a0e83b4ed05b422cd352d0e3df02fcc2c3d7ec17a9bde28e50dd08f64b14a8fa27a197eefefe267164fec5", 0x1000}, {&(0x7f000000a740)="948c366dfdcc867bb0a08cd064", 0xd}, {&(0x7f000000a780)="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", 0x1000}], 0x5, &(0x7f000000da40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x128, 0x44}, {&(0x7f000000db80)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f000000f240)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}], 0x98, 0x8cd0}, {&(0x7f000000f300)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f000000f7c0)=[{&(0x7f000000f380)="fc2db7f5092b575bdaa16e1ec7dd779a6f8fb26454cbbb9c2509be31b4cafd3d4f067ee8b95c32204696fbee909bf1ae1238f40e083b4602dcac7d1f5ac3375f2439f299c51809743421a5e9449bfaf695644b671ac7e94a432a4141e9cf137c1f7a619ae37224cb7fa905bd98a624a92951c3191b2edfbec3fa3b180ee49cd70ec8cd", 0x83}, {&(0x7f000000f440)="b2c8bea430f771e31eac6646", 0xc}, {&(0x7f000000f480)="3c5e56fe1a05d35c16ec34fcf285ee6025e11840e0ef2e9fa13fd6796d5ff7de13d23ca65a901a4be871aecb763f01f3e75578acbec87745600caf52b7b0a20e118e6e06bff090b92e6eeec202495283e959163b822bf2a0d5b407be23ef33282628df3083496f5dbc7f82859c75d41a364b6e62a63483263d2b9ff9194b37f1bb78be7a7f7ad9aa6c52fb3b18102a2bacadfa23de7a156e281ce1b5bb78829303b8d4d29e826f311b23a9f65ed002b7400b6cfef81ed2ee0d63074a2a1f7477e09c541f093123e48e37f4cb351b8c89cdb35cf5042b24da6911cce8cd0103b7f3f37343fd129ed1169552df02d8", 0xee}, {&(0x7f000000f580)="9fcf22c88a75e490557c1249cabec68e5755cddadda9b32cc91cd0536480d6c6963944349f7150a09dcc1ba2eb7be722f097f92ffb9b55ea66e1d454c09d865c01fe630e5cdefa3d86533e4c1787d13f639ee513b513d1550faa300f802cd37cc714bdd4bcdf8a072a65907a4189223d6cb0e4d07fb88450a494e1bf34096cd9587f9366f8d8c381192efb14918b176ea0e855eb9ce203bdac67771456eb4308fa9e486931d4f752919e10710c21604d1730e3e00503e9ce7b89acdffee0f5ca4e46adbae88d1c6c65f29c6a636dbfbdcbd7fcab78996986905f34021f299fce3c77f68d27", 0xe5}, {&(0x7f000000f680)="a6847e997057456ad965b436dfeed8a760d267b5ba5fe91339093eeba339c2c4a78ad311e07bcce87b", 0x29}, {&(0x7f000000f6c0)="e5381cef7ab604e290d6cf028c7772c32145ad225e811bbb7f47c011d96385768840641cbc467d3cceee0cee6f41ffed934179938f33986edbcb661bc5f99f276ac39615941b0c2c419483082142160b27f6ef0176f1e8486f6931d3c52ec3a819f5763b26581668a1af0355ac90d4fe1f59c4271d0241b6121d3f15ffda248144c1352fe5a53b1685736ce64ca61d62e2420f6dfe1f27b764fdd276005e39f9eb03654053a159c48f0aba6453b30ed3a5d99dd53aad9b1226071eaa7fcaf62a464a9cefeb8f123f7da40a2c2d7e312f9fd794268a78803911e4188cb6f77067d265535664be94", 0xe7}], 0x6, &(0x7f0000013a00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, r6}}}], 0x80, 0x10}], 0x8, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001bc0)={{0x3, r2, r6, 0x0, r8, 0x2, 0x1}, 0x9, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 1092.480483] IPv6: ADDRCONF(NETDEV_UP): veth54: link is not ready 07:04:16 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:04:16 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:04:16 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x178, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x178}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1092.583770] sd 0:0:1:0: [sg0] tag#4765 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1092.592708] sd 0:0:1:0: [sg0] tag#4765 CDB: opcode=0xfa (vendor) [ 1092.598934] sd 0:0:1:0: [sg0] tag#4765 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1092.607835] sd 0:0:1:0: [sg0] tag#4765 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1092.616721] sd 0:0:1:0: [sg0] tag#4765 CDB[20]: 65 [ 1092.636287] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1092.668163] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 07:04:16 executing program 3 (fault-call:0 fault-nth:20): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:04:16 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1092.750043] device veth55 entered promiscuous mode [ 1092.769674] FAULT_INJECTION: forcing a failure. [ 1092.769674] name failslab, interval 1, probability 0, space 0, times 0 [ 1092.781208] CPU: 1 PID: 29378 Comm: syz-executor.3 Not tainted 4.19.163-syzkaller #0 [ 1092.789096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1092.793022] IPv6: ADDRCONF(NETDEV_UP): veth55: link is not ready [ 1092.798436] Call Trace: [ 1092.798454] dump_stack+0x1fc/0x2fe [ 1092.798473] should_fail.cold+0xa/0x14 [ 1092.798488] ? setup_fault_attr+0x200/0x200 [ 1092.798499] ? lock_acquire+0x170/0x3c0 [ 1092.798517] __should_failslab+0x115/0x180 [ 1092.822860] sd 0:0:1:0: [sg0] tag#4765 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1092.822943] should_failslab+0x5/0xf [ 1092.827239] sd 0:0:1:0: [sg0] tag#4765 CDB: opcode=0xfa (vendor) [ 1092.835883] kmem_cache_alloc+0x277/0x370 [ 1092.839637] sd 0:0:1:0: [sg0] tag#4765 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1092.845698] __kernfs_new_node+0xd2/0x680 [ 1092.849854] sd 0:0:1:0: [sg0] tag#4765 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1092.858624] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1092.858644] ? __mutex_unlock_slowpath+0xea/0x610 [ 1092.862775] sd 0:0:1:0: [sg0] tag#4765 CDB[20]: 65 [ 1092.871575] ? wait_for_completion_io+0x10/0x10 [ 1092.871589] ? kernfs_next_descendant_post+0x19c/0x290 [ 1092.871605] kernfs_new_node+0x92/0x120 [ 1092.900024] __kernfs_create_file+0x51/0x33f [ 1092.904426] sysfs_add_file_mode_ns+0x226/0x540 [ 1092.909096] internal_create_group+0x355/0xb20 [ 1092.913683] ? sysfs_remove_link_from_group+0x70/0x70 [ 1092.918860] ? lock_downgrade+0x720/0x720 [ 1092.922992] lo_ioctl+0xf7c/0x20e0 [ 1092.926511] ? loop_set_status64+0x110/0x110 [ 1092.930909] blkdev_ioctl+0x5cb/0x1a7e [ 1092.934781] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1092.940133] ? blkpg_ioctl+0x9d0/0x9d0 [ 1092.943997] ? mark_held_locks+0xf0/0xf0 [ 1092.948046] ? mark_held_locks+0xf0/0xf0 [ 1092.952091] ? debug_check_no_obj_freed+0x201/0x482 [ 1092.957101] ? lock_downgrade+0x720/0x720 [ 1092.961239] block_ioctl+0xe9/0x130 [ 1092.964847] ? blkdev_fallocate+0x3f0/0x3f0 [ 1092.969147] do_vfs_ioctl+0xcdb/0x12e0 [ 1092.973010] ? lock_downgrade+0x720/0x720 [ 1092.977143] ? check_preemption_disabled+0x41/0x280 [ 1092.982153] ? ioctl_preallocate+0x200/0x200 [ 1092.986547] ? __fget+0x356/0x510 [ 1092.989989] ? do_dup2+0x450/0x450 [ 1092.993519] ? do_sys_open+0x2bf/0x520 [ 1092.997395] ksys_ioctl+0x9b/0xc0 [ 1093.000850] __x64_sys_ioctl+0x6f/0xb0 [ 1093.004714] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1093.009282] do_syscall_64+0xf9/0x620 [ 1093.013076] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1093.018258] RIP: 0033:0x45dfb7 [ 1093.021437] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 6d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1093.040460] RSP: 002b:00007f7d235eca18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1093.048142] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045dfb7 [ 1093.055390] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1093.062652] RBP: 0000000000000000 R08: 0000000020000260 R09: 0000000000000000 [ 1093.069906] R10: 000000000003fc00 R11: 0000000000000246 R12: 0000000000000004 [ 1093.077156] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000020000270 07:04:16 executing program 3 (fault-call:0 fault-nth:21): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1093.111446] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1093.137694] device veth46 entered promiscuous mode [ 1093.171551] IPv6: ADDRCONF(NETDEV_UP): veth46: link is not ready [ 1093.250769] FAULT_INJECTION: forcing a failure. [ 1093.250769] name failslab, interval 1, probability 0, space 0, times 0 [ 1093.291863] CPU: 0 PID: 29412 Comm: syz-executor.3 Not tainted 4.19.163-syzkaller #0 [ 1093.299863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1093.309204] Call Trace: [ 1093.311789] dump_stack+0x1fc/0x2fe [ 1093.315435] should_fail.cold+0xa/0x14 [ 1093.319314] ? setup_fault_attr+0x200/0x200 [ 1093.323625] ? lock_acquire+0x170/0x3c0 [ 1093.327601] __should_failslab+0x115/0x180 [ 1093.331826] should_failslab+0x5/0xf [ 1093.335528] __kmalloc+0x2ab/0x3c0 [ 1093.339064] ? kobject_get_path+0xbf/0x240 [ 1093.343292] kobject_get_path+0xbf/0x240 [ 1093.347355] kobject_uevent_env+0x25c/0x14a0 [ 1093.351863] lo_ioctl+0xff9/0x20e0 [ 1093.355408] ? loop_set_status64+0x110/0x110 [ 1093.359830] blkdev_ioctl+0x5cb/0x1a7e [ 1093.363711] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1093.369098] ? blkpg_ioctl+0x9d0/0x9d0 [ 1093.372992] ? mark_held_locks+0xf0/0xf0 [ 1093.377047] ? mark_held_locks+0xf0/0xf0 [ 1093.381109] ? debug_check_no_obj_freed+0x201/0x482 [ 1093.386122] ? lock_downgrade+0x720/0x720 [ 1093.390278] block_ioctl+0xe9/0x130 [ 1093.393879] ? blkdev_fallocate+0x3f0/0x3f0 [ 1093.398179] do_vfs_ioctl+0xcdb/0x12e0 [ 1093.402045] ? lock_downgrade+0x720/0x720 [ 1093.406172] ? check_preemption_disabled+0x41/0x280 [ 1093.411163] ? ioctl_preallocate+0x200/0x200 [ 1093.415549] ? __fget+0x356/0x510 [ 1093.418979] ? do_dup2+0x450/0x450 [ 1093.422497] ? do_sys_open+0x2bf/0x520 [ 1093.426363] ksys_ioctl+0x9b/0xc0 [ 1093.429810] __x64_sys_ioctl+0x6f/0xb0 [ 1093.433684] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1093.438241] do_syscall_64+0xf9/0x620 [ 1093.442026] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1093.447193] RIP: 0033:0x45dfb7 [ 1093.450365] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 6d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1093.469238] RSP: 002b:00007f7d235eca18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1093.476955] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045dfb7 [ 1093.484317] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1093.491805] RBP: 0000000000000000 R08: 0000000020000260 R09: 0000000000000000 [ 1093.499055] R10: 000000000003fc00 R11: 0000000000000246 R12: 0000000000000004 [ 1093.506309] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000020000270 07:04:17 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x16c, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1093.605954] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1093.614662] sd 0:0:1:0: [sg0] tag#4765 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1093.614699] sd 0:0:1:0: [sg0] tag#4765 CDB: opcode=0xfa (vendor) [ 1093.614735] sd 0:0:1:0: [sg0] tag#4765 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1093.614769] sd 0:0:1:0: [sg0] tag#4765 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1093.614801] sd 0:0:1:0: [sg0] tag#4765 CDB[20]: 65 07:04:17 executing program 3 (fault-call:0 fault-nth:22): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1093.765738] FAULT_INJECTION: forcing a failure. [ 1093.765738] name failslab, interval 1, probability 0, space 0, times 0 [ 1093.785413] CPU: 0 PID: 29442 Comm: syz-executor.3 Not tainted 4.19.163-syzkaller #0 [ 1093.793289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1093.802629] Call Trace: [ 1093.805195] dump_stack+0x1fc/0x2fe [ 1093.808800] should_fail.cold+0xa/0x14 [ 1093.812692] ? setup_fault_attr+0x200/0x200 [ 1093.816998] ? lock_acquire+0x170/0x3c0 [ 1093.820951] __should_failslab+0x115/0x180 [ 1093.825157] should_failslab+0x5/0xf [ 1093.828842] __kmalloc+0x2ab/0x3c0 [ 1093.832353] ? kobject_get_path+0xbf/0x240 [ 1093.836566] kobject_get_path+0xbf/0x240 [ 1093.840613] kobject_uevent_env+0x25c/0x14a0 [ 1093.845001] lo_ioctl+0xff9/0x20e0 [ 1093.848521] ? loop_set_status64+0x110/0x110 [ 1093.852907] blkdev_ioctl+0x5cb/0x1a7e [ 1093.856770] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1093.862111] ? blkpg_ioctl+0x9d0/0x9d0 [ 1093.865973] ? mark_held_locks+0xf0/0xf0 [ 1093.870047] ? mark_held_locks+0xf0/0xf0 [ 1093.874088] ? debug_check_no_obj_freed+0x201/0x482 [ 1093.879084] ? lock_downgrade+0x720/0x720 [ 1093.883219] block_ioctl+0xe9/0x130 [ 1093.886861] ? blkdev_fallocate+0x3f0/0x3f0 [ 1093.891167] do_vfs_ioctl+0xcdb/0x12e0 [ 1093.895037] ? lock_downgrade+0x720/0x720 [ 1093.899160] ? check_preemption_disabled+0x41/0x280 [ 1093.904150] ? ioctl_preallocate+0x200/0x200 [ 1093.908573] ? __fget+0x356/0x510 [ 1093.912003] ? do_dup2+0x450/0x450 [ 1093.915519] ? do_sys_open+0x2bf/0x520 [ 1093.919383] ksys_ioctl+0x9b/0xc0 [ 1093.922830] __x64_sys_ioctl+0x6f/0xb0 [ 1093.926695] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1093.931254] do_syscall_64+0xf9/0x620 [ 1093.935084] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1093.940288] RIP: 0033:0x45dfb7 [ 1093.943469] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 6d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1093.962363] RSP: 002b:00007f7d235eca18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1093.970046] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045dfb7 [ 1093.977332] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1093.984580] RBP: 0000000000000000 R08: 0000000020000260 R09: 0000000000000000 [ 1093.991827] R10: 000000000003fc00 R11: 0000000000000246 R12: 0000000000000004 [ 1093.999069] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000020000270 07:04:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:04:17 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_G_AUDIO(0xffffffffffffffff, 0x80345621, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff00810000000000000085a1eaf8474173aafa350a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) [ 1094.076010] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 07:04:17 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xcfd6, 0x3, [0x273, 0x6, 0x1]}, &(0x7f00000004c0)=0xe) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 07:04:17 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x16c, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) 07:04:17 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0x7ff, 0xd48844d3fb64c498, 0x8d4b, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r4, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5003f00, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 1094.134575] sd 0:0:1:0: [sg0] tag#4765 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1094.143508] sd 0:0:1:0: [sg0] tag#4765 CDB: opcode=0xfa (vendor) [ 1094.149753] sd 0:0:1:0: [sg0] tag#4765 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1094.158697] sd 0:0:1:0: [sg0] tag#4765 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1094.167607] sd 0:0:1:0: [sg0] tag#4765 CDB[20]: 65 07:04:17 executing program 3 (fault-call:0 fault-nth:23): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) 07:04:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="fa629138efe45d9393529133cf3ea57b8a55cdd71c75bbb098e8f431b9c23bae65", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:04:17 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@broadcast, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @initial, @device_b, @device_b}}, {@type00={{}, {0x338}, @device_b, @device_a, @from_mac}}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x16c, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb4, 0xac, "28376c9a09cf2ee47732ded5e6b3771ccca1bb2bafc8cbfb4db6b1426bed916f2b9f1872586218ae31b6cea444207b52c5229402174b168c159068a95ff71618af52612e081d9515b232de5e11a9825552a3792d2803382b18f0c20176612e9dcd436b33d55aa5be100d96fc5e40b41c8ff6dd4ae920f9f146ebb1407c774ed1540e29623ec0fdc979205cddf0b276e7264a84202b8b1dc69ae4c7d168faaae6d5548ceda7175f7f5e64e55a3726c2e9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x58, 0xac, "5f598cd74fd0dd282dd9fe41059dafbd0f67bce70823cdb806eb6c90a6fd5fb65b8634c615f736e9e7af14e386b896d4e3cac26ddc99340ed98cb5e70017ce808fc55117c8814b2a8b02437b88cf6f60cc7c3e24"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3085d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) [ 1094.335812] nla_parse: 1 callbacks suppressed [ 1094.335859] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1094.433979] sd 0:0:1:0: [sg0] tag#4766 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1094.442967] sd 0:0:1:0: [sg0] tag#4766 CDB: opcode=0xfa (vendor) [ 1094.449340] sd 0:0:1:0: [sg0] tag#4766 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1094.458263] sd 0:0:1:0: [sg0] tag#4766 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1094.460512] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1094.467188] sd 0:0:1:0: [sg0] tag#4766 CDB[20]: 65 [ 1094.504851] FAULT_INJECTION: forcing a failure. [ 1094.504851] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1094.516747] CPU: 1 PID: 29523 Comm: syz-executor.3 Not tainted 4.19.163-syzkaller #0 [ 1094.524617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1094.533965] Call Trace: [ 1094.536563] dump_stack+0x1fc/0x2fe [ 1094.540375] should_fail.cold+0xa/0x14 [ 1094.544271] ? setup_fault_attr+0x200/0x200 [ 1094.548598] ? lock_acquire+0x170/0x3c0 [ 1094.552580] ? kernfs_activate+0x2c/0x1d0 [ 1094.556742] __alloc_pages_nodemask+0x239/0x2890 [ 1094.561506] ? __mutex_lock+0x3a8/0x1260 [ 1094.565569] ? kernfs_add_one+0x36a/0x4c0 [ 1094.569720] ? __lock_acquire+0x6de/0x3ff0 [ 1094.573963] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1094.578809] ? __mutex_unlock_slowpath+0xea/0x610 [ 1094.583658] ? kernfs_next_descendant_post+0x19c/0x290 [ 1094.588942] ? kernfs_add_one+0x124/0x4c0 [ 1094.593096] cache_grow_begin+0xa4/0x8a0 [ 1094.597159] ? setup_fault_attr+0x200/0x200 [ 1094.601478] ? lock_acquire+0x170/0x3c0 [ 1094.605465] cache_alloc_refill+0x273/0x340 [ 1094.609784] kmem_cache_alloc_trace+0x354/0x380 [ 1094.614447] ? dev_uevent_filter+0xd0/0xd0 [ 1094.618677] kobject_uevent_env+0x236/0x14a0 [ 1094.623095] lo_ioctl+0xff9/0x20e0 [ 1094.626643] ? loop_set_status64+0x110/0x110 [ 1094.631053] blkdev_ioctl+0x5cb/0x1a7e [ 1094.634939] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1094.640301] ? blkpg_ioctl+0x9d0/0x9d0 [ 1094.644193] ? mark_held_locks+0xf0/0xf0 [ 1094.648254] ? mark_held_locks+0xf0/0xf0 [ 1094.652320] ? debug_check_no_obj_freed+0x201/0x482 [ 1094.657338] ? lock_downgrade+0x720/0x720 [ 1094.661500] block_ioctl+0xe9/0x130 [ 1094.665140] ? blkdev_fallocate+0x3f0/0x3f0 [ 1094.669459] do_vfs_ioctl+0xcdb/0x12e0 [ 1094.673338] ? lock_downgrade+0x720/0x720 [ 1094.677481] ? check_preemption_disabled+0x41/0x280 [ 1094.682497] ? ioctl_preallocate+0x200/0x200 [ 1094.686914] ? __fget+0x356/0x510 [ 1094.690369] ? do_dup2+0x450/0x450 [ 1094.693906] ? do_sys_open+0x2bf/0x520 [ 1094.697800] ksys_ioctl+0x9b/0xc0 [ 1094.701256] __x64_sys_ioctl+0x6f/0xb0 [ 1094.705143] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1094.709724] do_syscall_64+0xf9/0x620 [ 1094.713525] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1094.718707] RIP: 0033:0x45dfb7 [ 1094.721896] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 6d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1094.740796] RSP: 002b:00007f7d235eca18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1094.748500] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045dfb7 07:04:18 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm_plock\x00', 0x412040, 0x0) setsockopt$inet_buf(r0, 0x0, 0x25, &(0x7f0000001b40)="86a9e6b13312c66c8110e28363babcbc6fc958429dba7e43e9d9a51b20966db7c6b4968d9053ddede789a2af8b2cb9152e091c2ecde6cd9d226055bd4346c1f116d7100ab4f9a12facc152a99acd1479306c15440f10d3d2cd8e8e83ec5d15f1c6d6303e30f6751722ab8aff3684efb6dbcadae4d3b4c1da3b388f94fafd02565bbb4236cf4abaee", 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f00000001c0)={0x0, 0x0, 0x550, 0x40, 0x0, 0x0, 0x8, 0x2, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x10}) r2 = socket(0x9, 0x5, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x1402, 0x400, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040800}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r2, &(0x7f0000000000), 0x4924924924924cb, 0x0) sendmsg$nfc_llcp(r3, &(0x7f0000000540)={&(0x7f00000001c0)={0x27, 0x0, 0x1, 0x1, 0x9, 0x6, "e619ee807122d64ac496de21f67186f665f3dbee2d59ba8a681b9db3895e662f90241f23dedde5010a86a673e1c87ab2d701b46be836619d5de76292b50b59", 0x8}, 0x60, &(0x7f0000001940)=[{&(0x7f0000000240)="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", 0xfc}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000000440)="9ecf4cdd4ab3085573dec508ecd69759c25e050cdc4337ed6660fd216b2b78959ea48cfed1268c5a30612a968fabd354372933b4ac93829687a53e05007e73e15bf55e58886fc43770a6d36bcf6cea2793cb3cf0208e82c74d8c0df597344a00426890a01596b36eda84a332769d473bfec449d52209f6603379c1da4de4726028cdb4f06ab9ad200d79eb8e797a6232e5f0263f0f301109ca2d50ca77ff9d19fb9030b0a6050143b24718388d7c0c2fa5160510859c6afb91e14e8de5e8afed91e48469", 0xc4}, {&(0x7f00000005c0)="b0b904a81e177d4c08f3f48badfc97c6799c19631cddf02cc5d7087a0f7f35872df488dd06a7996a9ef95cbffd71660a08a2ba2093c0a7deab2cc230dd96682014c100b7ea5b55d383d3b1fb9794b65f9973f9f34f94611bf009d7c4883ee452c3af7cf3c0c0dc3e60b5886bccefa3539158b96e74155e3adb865fc936320b35821c8d1d076df2062dab37f8b88bb45aa602738e94338a4aabcaf0bd3c68ea92472b473650933b1ee530b13a90efacff1088998c35035582c8da68ba0074344d80841d70763673fe41545f74bf23be1316af13087a8fbaf9967246a56b38c9b1cd3731c87056f4deb4e2aff2a994ad", 0xef}, {&(0x7f0000000340)}, {&(0x7f0000000380)="d682983bb72d969c17ed19362723", 0xe}, {&(0x7f0000001780)="3a6f4b88bdf7dc89ca8e739a368622050059e7b98e87359e8ae85f94dfcdac53e3ad0fb1870812042d7cb43da4052246a4ac8715df2fc386258a506f395d3397d501f88dc624c27b0a2f484c348f232cee44e6d6073b28085010a38d592f612cbb196f3c3aec8cb11f48088746b4ed6572e0274170287139ada58d02c4a92f1a1b9aefdcfcad5009e55d79a9657d527b34b7a5fdf715436b9309cd85c87b", 0x9e}, {&(0x7f0000001840)="e40c0ad0fc9a809fd8f8a72969a27c0cd1bd8abdb00cb77c072f71b3301be0d7a9baf20d1d6694f6cad425c32371f4a9545936b3b8fd2ee7f584bd827ed8e679e28c61af37c5faba90ff5a45265fa5a1f5211c72500840471c79f5a4a445ac1ebd96ff0102b8a50d4e4cafe8fe258e109a97183dae619536ea9cec85c4ff9c68333fd8e0ce9765af94b28de4a945acf1fca89fe238af1806702efb55dd929f53d4529d1bf0b460f1201c32bdc6431c46c393dd113002b06abbe94df453a6a178f638da62b437c0cfc9ad", 0xca}, {&(0x7f00000006c0)="0d525981f077b6496bc2394c3c90644c5c87cf10da83006d99d844b64747225769d7f9c7c6b20dda43b829fa1e7a604fd9a84eb88b56f88faaf9cb2d7dc7791710dd86bbeee4cf593b7fd26387759bea2a7ebb6d8745f589a0b00a0d5fe8df27457a1ab2301abb434f72ca79e76143ca9063fbd7ff", 0x75}], 0x9, &(0x7f0000001a00)=ANY=[@ANYBLOB="4000000000000000130100000001000025ad361fec9fb08d02bc479095ba9ac48625d3570340b53f57a51281d9a79a2fe698feb90277edf28ed36a1f5e34988d7771a0ca64b41437878c8033b807a27927483f0a67647d8b924c51d458a7fb60afc6629852c2a82e5d8c8a9ec9f1ff68337880c94e983eed8ae196879301345725bab2c4f3d662952581a456ef3fd8f1558dd7cf554ee872465309847cc7ec348f92922097fb0a6fbad6f7db44cbf6f5f728"], 0x40, 0x4008010}, 0x4000804) [ 1094.752356] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1094.755759] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1094.755772] RBP: 0000000000000000 R08: 0000000020000260 R09: 0000000000000000 [ 1094.755780] R10: 000000000003fc00 R11: 0000000000000246 R12: 0000000000000004 [ 1094.755787] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000020000270 07:04:18 executing program 3 (fault-call:0 fault-nth:24): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000180)=ANY=[]) [ 1094.840674] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1094.931343] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1094.989494] device veth46 entered promiscuous mode [ 1095.022393] FAULT_INJECTION: forcing a failure. [ 1095.022393] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.036126] CPU: 1 PID: 29573 Comm: syz-executor.3 Not tainted 4.19.163-syzkaller #0 [ 1095.044021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1095.053361] Call Trace: [ 1095.055945] dump_stack+0x1fc/0x2fe [ 1095.059576] should_fail.cold+0xa/0x14 [ 1095.063467] ? setup_fault_attr+0x200/0x200 [ 1095.067788] ? lock_acquire+0x170/0x3c0 [ 1095.071769] __should_failslab+0x115/0x180 [ 1095.076005] should_failslab+0x5/0xf [ 1095.079715] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 1095.084826] __kmalloc_node_track_caller+0x38/0x70 [ 1095.089762] __alloc_skb+0xae/0x560 [ 1095.093387] alloc_uevent_skb+0x7b/0x210 [ 1095.097450] kobject_uevent_env+0xa83/0x14a0 [ 1095.101852] lo_ioctl+0xff9/0x20e0 [ 1095.105372] ? loop_set_status64+0x110/0x110 [ 1095.109761] blkdev_ioctl+0x5cb/0x1a7e [ 1095.113628] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1095.118978] ? blkpg_ioctl+0x9d0/0x9d0 [ 1095.122841] ? mark_held_locks+0xf0/0xf0 [ 1095.126876] ? mark_held_locks+0xf0/0xf0 [ 1095.131057] ? debug_check_no_obj_freed+0x201/0x482 [ 1095.136061] ? lock_downgrade+0x720/0x720 [ 1095.140197] block_ioctl+0xe9/0x130 [ 1095.143814] ? blkdev_fallocate+0x3f0/0x3f0 [ 1095.148125] do_vfs_ioctl+0xcdb/0x12e0 [ 1095.152080] ? lock_downgrade+0x720/0x720 [ 1095.156212] ? check_preemption_disabled+0x41/0x280 [ 1095.161325] ? ioctl_preallocate+0x200/0x200 [ 1095.165726] ? __fget+0x356/0x510 [ 1095.169159] ? do_dup2+0x450/0x450 [ 1095.172672] ? do_sys_open+0x2bf/0x520 [ 1095.176537] ksys_ioctl+0x9b/0xc0 [ 1095.179969] __x64_sys_ioctl+0x6f/0xb0 [ 1095.183831] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1095.188396] do_syscall_64+0xf9/0x620 [ 1095.192183] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1095.197367] RIP: 0033:0x45dfb7 [ 1095.199213] sd 0:0:1:0: [sg0] tag#4766 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1095.200542] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 6d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1095.209307] sd 0:0:1:0: [sg0] tag#4766 CDB: opcode=0xfa (vendor) [ 1095.228230] RSP: 002b:00007f7d235eca18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1095.228241] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045dfb7 [ 1095.228246] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1095.228253] RBP: 0000000000000000 R08: 0000000020000260 R09: 0000000000000000 [ 1095.228259] R10: 000000000003fc00 R11: 0000000000000246 R12: 0000000000000004 [ 1095.228265] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000020000270 [ 1095.231247] BUG: unable to handle kernel paging request at fffffffffffffc54 [ 1095.234432] sd 0:0:1:0: [sg0] tag#4766 CDB[00]: fa 62 91 38 ef e4 5d 93 93 52 91 33 cf 3e a5 7b [ 1095.242089] PGD 9e6e067 P4D 9e6e067 PUD 9e70067 PMD 0 [ 1095.242106] Oops: 0000 [#1] PREEMPT SMP KASAN [ 1095.242116] CPU: 1 PID: 29499 Comm: syz-executor.2 Not tainted 4.19.163-syzkaller #0 [ 1095.242121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1095.242133] RIP: 0010:mm_update_next_owner+0x376/0x650 [ 1095.242142] Code: 00 2b 00 48 8d bd 54 fc ff ff 48 89 f8 48 c1 e8 03 0f b6 14 18 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 26 02 00 00 <44> 8b ad 54 fc ff ff 31 ff 41 81 e5 00 00 20 00 44 89 ee e8 32 01 [ 1095.242147] RSP: 0018:ffff888216da7d48 EFLAGS: 00010246 [ 1095.242155] RAX: 0000000000000007 RBX: dffffc0000000000 RCX: ffffffff8139d04e [ 1095.242160] RDX: 0000000000000000 RSI: ffffffff8139d00f RDI: fffffffffffffc54 [ 1095.242166] RBP: 0000000000000000 R08: ffff8880001105a0 R09: 0000000000000000 [ 1095.242172] R10: 0000000000000005 R11: 0000000000000000 R12: ffff888058f09380 [ 1095.242177] R13: ffff88808f961810 R14: ffff888019c06000 R15: 0000000000000000 [ 1095.242185] FS: 0000000000000000(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 1095.242191] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1095.242197] CR2: fffffffffffffc54 CR3: 000000004884f000 CR4: 00000000001406e0 [ 1095.242206] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1095.242212] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1095.242214] Call Trace: [ 1095.242232] do_exit+0xae8/0x2be0 [ 1095.249937] sd 0:0:1:0: [sg0] tag#4766 CDB[10]: 8a 55 cd d7 1c 75 bb b0 98 e8 f4 31 b9 c2 3b ae [ 1095.256718] ? try_to_wake_up+0x733/0x1050 [ 1095.256727] ? do_group_exit+0x2a1/0x310 [ 1095.256735] ? mm_update_next_owner+0x650/0x650 [ 1095.256743] ? check_preemption_disabled+0x41/0x280 [ 1095.256752] ? lock_downgrade+0x720/0x720 [ 1095.256761] ? kick_process+0xe4/0x170 [ 1095.256770] ? _raw_spin_unlock_irq+0x24/0x80 [ 1095.256779] do_group_exit+0x125/0x310 [ 1095.256791] __x64_sys_exit_group+0x3a/0x50 [ 1095.264057] sd 0:0:1:0: [sg0] tag#4766 CDB[20]: 65 [ 1095.271283] do_syscall_64+0xf9/0x620 [ 1095.271293] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1095.271304] RIP: 0033:0x45e149 [ 1095.492971] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1095.511848] RSP: 002b:00007fff192e17e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1095.519535] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 000000000045e149 [ 1095.526781] RDX: 0000000000417aa1 RSI: fffffffffffffff7 RDI: 0000000000000000 [ 1095.534209] RBP: 0000000000000000 R08: 00000000622ee733 R09: 00007fff192e1840 [ 1095.541459] R10: 000000000000072f R11: 0000000000000246 R12: 0000000000000000 [ 1095.548707] R13: 00007fff192e1840 R14: 00007fff192e1850 R15: 0000000000000001 [ 1095.555957] Modules linked in: [ 1095.559127] CR2: fffffffffffffc54 [ 1095.562648] ---[ end trace 91618e9a7b9fce83 ]--- [ 1095.567382] RIP: 0010:mm_update_next_owner+0x376/0x650 [ 1095.572646] Code: 00 2b 00 48 8d bd 54 fc ff ff 48 89 f8 48 c1 e8 03 0f b6 14 18 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 26 02 00 00 <44> 8b ad 54 fc ff ff 31 ff 41 81 e5 00 00 20 00 44 89 ee e8 32 01 [ 1095.591525] RSP: 0018:ffff888216da7d48 EFLAGS: 00010246 [ 1095.596861] RAX: 0000000000000007 RBX: dffffc0000000000 RCX: ffffffff8139d04e [ 1095.604106] RDX: 0000000000000000 RSI: ffffffff8139d00f RDI: fffffffffffffc54 [ 1095.611348] RBP: 0000000000000000 R08: ffff8880001105a0 R09: 0000000000000000 [ 1095.618677] R10: 0000000000000005 R11: 0000000000000000 R12: ffff888058f09380 [ 1095.625919] R13: ffff88808f961810 R14: ffff888019c06000 R15: 0000000000000000 [ 1095.633162] FS: 0000000000000000(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 1095.641358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1095.647211] CR2: fffffffffffffc54 CR3: 000000004884f000 CR4: 00000000001406e0 [ 1095.654468] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1095.661710] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1095.669054] Kernel panic - not syncing: Fatal exception [ 1096.800969] Shutting down cpus with NMI [ 1096.805824] Kernel Offset: disabled [ 1096.809436] Rebooting in 86400 seconds..