CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) shutdown(r3, 0x1) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r2, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="02edffff06000000000000000000000005001a00ac141400000000000000000000000000ac1e000100"/56], 0x38}}, 0x0) 06:35:17 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0xc2081, 0x0) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000240)={0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r1, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) r6 = accept4$inet(r5, &(0x7f0000000280)={0x2, 0x0, @multicast2}, &(0x7f00000002c0)=0x10, 0x80000) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r7, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000001700)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000001800)=0xe8) setsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000001840)={@broadcast, @empty, r8}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r9 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x800, 0x2000) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000140)={0x9, 0x2, 0x4, 0x10000, 0xc5, {}, {0x4, 0xc, 0x21, 0xff, 0x2, 0x40, "6c72cebd"}, 0x7, 0x2, @planes=&(0x7f0000000100)={0x4, 0x7, @fd=r9, 0x6}, 0x1, 0x0, r0}) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000001c0)) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000033000505d25a80648c63940d0324fc60100010400a000200053582c137153e370907018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 1020.106183][ T6932] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1020.185736][ T6935] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. 06:35:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0xa, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @sadb_ident={0x2, 0xa, 0xd000, 0x0, 0xfffffffffffffff9}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d2}, @sadb_sa={0x2, 0x1, 0x4d6, 0x0, 0x2, 0x59, 0x1, 0x80000000}]}, 0x68}}, 0x0) 06:35:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IFA_FLAGS={0x8}]}, 0x34}}, 0x0) 06:35:17 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x100) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1020.636070][ C1] sd 0:0:1:0: [sg0] tag#6623 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1020.646791][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB: Test Unit Ready [ 1020.653661][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1020.663556][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1020.673433][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1020.683392][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1020.693271][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1020.703178][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1020.713039][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1020.722885][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1020.732747][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1020.744650][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1020.754536][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1020.764401][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1020.774283][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06:35:17 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="64000000100005070000398a723d000000001000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e0000003c0012000c00010069703667726500002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032c6e6b6cb33cabacf730a75781fdb13"], 0x64}}, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200243, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_POLL(r4, &(0x7f0000000400)={0x18, 0xffffffffffffffda, 0x2, {0x2}}, 0x18) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000040)={0x8, "8590bb7b70258de78601bc1d12977399890fa9063ce00f8a673b98a6de43480a", 0x3, 0x5, 0x9, 0x20000, 0x2}) clone(0xa0004400, &(0x7f0000000200)="28c658ddd07c71e286d11f2e3efc133bd77ac09835ddefe8b7065b03610723c02809d19f0fb082bb0f2062b67378b5e226757e4118c32ff7e4e7a08dc6396bcc8776115737479e5aa133c4edf45f23240e67b73aed8fb669082a5e1e3258ec5ad3e8619d0a442237f76ac0a47a2980299e209287d92431bdf39fca4cca7ce2ce38b8033481f5413b16e3e97c69603a23d95ac13f3ec066bb9b8f78478c963f609634", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="a722b5ca407c60b5459da4ff3fd6c97eb8d459c36b4fa58402e860af7929791881e9f01f0a46ea2ad995ed7d41bee162f7919f986c76481c630fb5d3b0762960cd04d06af3109296fca4e23ce0147c28264c622f8311d12ee865a8f3115beaf794e7680e6028d3c694f908444709d50e39ce0c81305a055212ad1391eb0f346395917de597fb8db9cdcf5684cb6473e7d8") r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="a8a6c6cd9aaec75849ee3a1ff07a84b799c9e093000b451fe3dd30407082c646f696b139c420e16e7e3c88c0df6a5500de2999468bf1d8210a5215a5ae75f212d839096cf306a3ae50532f3ea81bf11330d37cf09fb99a353357a49bd8ed5e0ca4339b8df1830094c63df212b61547e462c86381e369", 0x76}], 0x1, &(0x7f00000005c0)=[@assoc={0x18, 0x117, 0x4, 0x699}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2ff0}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18}, @iv={0x70, 0x117, 0x2, 0x56, "8a0d0e267d4c0bff5224f3b5e894b3e9456b7cbf01a604d29cf1920b83cd224431c2ec0b3da4091fbcc9ef9d2b5a1f13184b31aa8ff1bcefa5dad0918c0528e99782bd1a8d320ad018491f00d807f81a4b596da8bd1f"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x1130}], 0x1, 0x200040c5) [ 1020.784158][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1020.794631][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:35:18 executing program 4 (fault-call:5 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) 06:35:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="020a000007000000000000000000000005001a00ac141400000000000000000000000000ac1e0001000000000000000000000000000000fe"], 0x38}}, 0x0) [ 1021.307456][ T6968] FAULT_INJECTION: forcing a failure. [ 1021.307456][ T6968] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1021.312275][ T6968] CPU: 1 PID: 6968 Comm: syz-executor.4 Not tainted 5.5.0-rc5-syzkaller #0 [ 1021.312275][ T6968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1021.312275][ T6968] Call Trace: [ 1021.312275][ T6968] dump_stack+0x1c9/0x220 [ 1021.312275][ T6968] should_fail+0xa4e/0xa60 [ 1021.312275][ T6968] should_fail_alloc_page+0x1e9/0x260 [ 1021.312275][ T6968] __alloc_pages_nodemask+0x3a8/0x5f60 [ 1021.312275][ T6968] ? kmsan_get_metadata+0x11d/0x180 [ 1021.312275][ T6968] ? kmsan_set_origin_checked+0x95/0xf0 [ 1021.312275][ T6968] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1021.376349][ T6968] ? kmsan_get_metadata+0x11d/0x180 [ 1021.376349][ T6968] ? kmsan_get_shadow_origin_ptr+0x6c/0xb0 [ 1021.376349][ T6968] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1021.376349][ T6968] ? get_page_from_freelist+0x11a9/0x1a10 [ 1021.376349][ T6968] kmsan_alloc_page+0x108/0x310 [ 1021.376349][ T6968] __alloc_pages_nodemask+0x57f2/0x5f60 [ 1021.376349][ T6968] ? kmsan_task_context_state+0x47/0x90 [ 1021.376349][ T6968] ? stack_trace_save+0x11c/0x1b0 [ 1021.376349][ T6968] ? stack_trace_save+0x11c/0x1b0 [ 1021.376349][ T6968] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1021.376349][ T6968] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1021.376349][ T6968] ? kmsan_get_metadata+0x11d/0x180 [ 1021.376349][ T6968] alloc_pages_vma+0xc68/0x1870 [ 1021.376349][ T6968] wp_page_copy+0x314/0x2dc0 [ 1021.376349][ T6968] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1021.376349][ T6968] ? update_stack_state+0x9aa/0xab0 [ 1021.376349][ T6968] ? kmsan_get_metadata+0x11d/0x180 [ 1021.376349][ T6968] ? kmsan_get_metadata+0x11d/0x180 [ 1021.376349][ T6968] do_wp_page+0x1c74/0x3070 [ 1021.376349][ T6968] ? kmsan_get_metadata+0x4f/0x180 [ 1021.376349][ T6968] ? kmsan_get_metadata+0x4f/0x180 [ 1021.376349][ T6968] ? kmsan_set_origin_checked+0x95/0xf0 [ 1021.376349][ T6968] handle_mm_fault+0x48bb/0x9de0 [ 1021.376349][ T6968] do_user_addr_fault+0xb30/0x1520 [ 1021.376349][ T6968] __do_page_fault+0x18f/0x400 [ 1021.376349][ T6968] do_page_fault+0xbb/0x4e0 [ 1021.376349][ T6968] ? kmsan_unpoison_pt_regs+0x29/0x30 [ 1021.376349][ T6968] page_fault+0x4e/0x60 [ 1021.376349][ T6968] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 1021.376349][ T6968] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 1021.376349][ T6968] RSP: 0018:ffffaf86957e7738 EFLAGS: 00010202 [ 1021.376349][ T6968] RAX: ffffffff84a5fd79 RBX: ffff913abde609d0 RCX: 00000000000001ff [ 1021.376349][ T6968] RDX: 0000000000000fff RSI: ffffaf869582de5e RDI: 0000000020001000 [ 1021.376349][ T6968] RBP: ffffaf86957e77a8 R08: ffffef804000000f R09: ffff913a6fffb000 [ 1021.376349][ T6968] R10: 0000000000000000 R11: 0000000000000000 R12: ffffaf869582d05e [ 1021.376349][ T6968] R13: ffffaf86957e7740 R14: 0000000020000200 R15: 0000000000000fff [ 1021.376349][ T6968] ? _copy_to_user+0x10c/0x1f0 [ 1021.376349][ T6968] copy_from_read_buf+0x2a3/0x8c0 [ 1021.376349][ T6968] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1021.376349][ T6968] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1021.376349][ T6968] n_tty_read+0x185f/0x3370 [ 1021.376349][ T6968] ? kmsan_internal_poison_shadow+0x9f/0xd0 [ 1021.376349][ T6968] ? kmsan_slab_free+0x6e/0xb0 [ 1021.376349][ T6968] ? kmem_cache_free+0x33d/0x2cf0 [ 1021.376349][ T6968] ? kmsan_get_metadata+0x11d/0x180 [ 1021.376349][ T6968] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1021.376349][ T6968] ? ldsem_down_read+0x84/0xce0 [ 1021.376349][ T6968] ? kmsan_get_metadata+0x11d/0x180 [ 1021.376349][ T6968] ? wait_woken+0x310/0x310 [ 1021.376349][ T6968] ? n_tty_flush_buffer+0x460/0x460 [ 1021.376349][ T6968] tty_read+0x275/0x6d0 [ 1021.376349][ T6968] do_iter_read+0x8df/0xe10 [ 1021.376349][ T6968] ? release_one_tty+0x590/0x590 [ 1021.376349][ T6968] do_readv+0x3dd/0x720 [ 1021.376349][ T6968] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1021.376349][ T6968] ? prepare_exit_to_usermode+0x1ca/0x520 [ 1021.376349][ T6968] __se_sys_readv+0x9b/0xb0 [ 1021.376349][ T6968] __x64_sys_readv+0x4a/0x70 [ 1021.376349][ T6968] do_syscall_64+0xb8/0x160 [ 1021.376349][ T6968] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1021.376349][ T6968] RIP: 0033:0x45b349 [ 1021.376349][ T6968] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1021.376349][ T6968] RSP: 002b:00007fd50ff82c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 06:35:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2b, 0x44000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x5, 0x1f, 0xfffffffd, 0x9, 0x3}, 0x14) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) [ 1021.376349][ T6968] RAX: ffffffffffffffda RBX: 00007fd50ff836d4 RCX: 000000000045b349 [ 1021.376349][ T6968] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000003 [ 1021.376349][ T6968] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1021.376349][ T6968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1021.376349][ T6968] R13: 000000000000087f R14: 00000000004c9c2f R15: 0000000000000002 06:35:19 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x100) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') 06:35:19 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000ffff0000000000009820000000003b086803ffff633b27e59aa14417000000006d17c3f2c876c69901000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680814966ff9f2d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee09aa272c56100c796d74c92fad7e34bd5f0e4542636c2cb6222bc224649282af53ba5f496b75b8a42657e0c0a675cc276304f3c1955e3e18f161d21d606f2ef2a7ec42902015d553235041a8a08a6d0470d519f61067d7e38717e69aa37681e5711a657e80950afb00e24f3f9567a61f77f817eaaa7af8e75e847a57fb014eb65fc813258f995a0505f1baa5d318fdaee68ff2be4f913f5cc8e883f0900000000000000c5a8a00e5085b900"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x100) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1022.137739][ C1] sd 0:0:1:0: [sg0] tag#6624 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1022.148611][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB: Test Unit Ready [ 1022.155384][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1022.165378][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1022.175637][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1022.185853][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1022.195800][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1022.206089][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1022.218312][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1022.228410][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1022.238489][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1022.248867][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1022.259332][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1022.269607][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1022.279776][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1022.290170][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1022.300447][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 1022.417866][ C1] sd 0:0:1:0: [sg0] tag#6625 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1022.429010][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB: Test Unit Ready [ 1022.435793][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1022.445645][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1022.455692][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1022.465842][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1022.475919][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1022.485916][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1022.495951][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1022.505893][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1022.515839][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1022.525835][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1022.536140][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1022.546174][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1022.556130][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1022.566127][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1022.576157][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:35:19 executing program 4 (fault-call:5 fault-nth:3): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) 06:35:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xe, 0x0, 0x0, 0x203, 0x0, 0x0, 0xffffffff, [@sadb_x_sec_ctx={0x201, 0x18, 0x7, 0x52, 0x1000, "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"}]}, 0x1018}}, 0x0) 06:35:20 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x0, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x100) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1023.211850][ C1] sd 0:0:1:0: [sg0] tag#6626 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1023.222647][ C1] sd 0:0:1:0: [sg0] tag#6626 CDB: Test Unit Ready [ 1023.229467][ C1] sd 0:0:1:0: [sg0] tag#6626 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1023.239505][ C1] sd 0:0:1:0: [sg0] tag#6626 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1023.249798][ C1] sd 0:0:1:0: [sg0] tag#6626 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1023.260013][ C1] sd 0:0:1:0: [sg0] tag#6626 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1023.269907][ C1] sd 0:0:1:0: [sg0] tag#6626 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1023.279756][ C1] sd 0:0:1:0: [sg0] tag#6626 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1023.289667][ C1] sd 0:0:1:0: [sg0] tag#6626 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1023.299531][ C1] sd 0:0:1:0: [sg0] tag#6626 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1023.309466][ C1] sd 0:0:1:0: [sg0] tag#6626 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1023.319355][ C1] sd 0:0:1:0: [sg0] tag#6626 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1023.329272][ C1] sd 0:0:1:0: [sg0] tag#6626 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1023.339471][ C1] sd 0:0:1:0: [sg0] tag#6626 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1023.349322][ C1] sd 0:0:1:0: [sg0] tag#6626 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1023.359182][ C1] sd 0:0:1:0: [sg0] tag#6626 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1023.369011][ C1] sd 0:0:1:0: [sg0] tag#6626 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:35:20 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x28b, &(0x7f000000d000)=[{&(0x7f0000000040)="4c0000001200ff0cfffefd956fa283b7549c911e00000000000000683540150024002e0034c8c249ae5f9e820f44acdf66672825c4110bee46", 0x39}], 0x1}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="390000001300094700bb65e1c3e4ffff06000000020000004500000025000000190029", 0x23}, {&(0x7f00000001c0)="62e81c5949a1f5df8b3923b6388d0ff2d8dcd017d1aebf774b85b8b243e32a3b027c8732b801d02a7cc8ce7faff7a2a1daa7305783bd28b470f6eb2d990ab706cbc1e2a67d5d074a220c36783a013f61f57dfbadfa335ffa19431b145cd8bba1aa6ede54735a8668a21e21607144d88414a037b99b44b353e5eaf7da360c2512d104ce208800", 0x86}, {&(0x7f0000000280)="e6a59c8b01aa57f107e6a664bcb226ad7e04b208e62d3ef011fd98c1c0bb3ebd14a2e848a978bc6b7bd729d8324de692b8b3036e0cc619bee30608ce9d2e80e68c3d82717868b26b4bf92ab814757538a2506855f64a18466faebe4b92a34c01946a664367f750ec1af0c92a99acc3902bdb08047ca5138b076aa8b153598af83aa1840d1e37979b69f973f88b9f69050496f543a8b641850eba721994eea57f354944e0614d1f73bd2f7661bb80312c385c7074ba1ed7e3", 0xb8}], 0x3) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924924924924f0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) 06:35:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$key(0xf, 0x3, 0x2) r2 = socket(0x23, 0x3, 0xf9) getsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r2, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020a0000000014001a00ac141400000000000000000000000000ac1e000100000000000000f30241976608a301f33298e6e68762b5d53e744f167d0de896139723fa0b4944e77a61abf06da60e078aef725bf04a7cf1f2fe294f3b745535002150000000000000008b72f26ced511bbb64acfcf44a772962b71adbf589cac4bbe3331e3b022860db08ae7439d820e711c18ba95d544d7240325e8de2d757b90ee0b26e03186d4006331aa7f0ef811fb62e7bade7c59310299d9b75e45762e31b998535f23a453b000000000000000000"], 0x71}}, 0x8081) syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x80, 0x44041) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r5, r5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r9, r9, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, 0x0) r11 = clone3(&(0x7f0000001680)={0x80801200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r12, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r12, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r5, r6, r9, r10, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r11, r12, 0x5}) r13 = getegid() mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuseblk\x00', 0x48000, &(0x7f0000000340)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {'group_id', 0x3d, r13}, 0x2c, {[{@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x400}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x4}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'eth1!'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/snd/controlC#\x00'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/snd/controlC#\x00'}}]}}) [ 1023.759250][ T7000] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 06:35:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="020a000007000000000000000040000005001a00ac141400000000000000000000000000ac1e000100"/56], 0x38}}, 0x0) 06:35:21 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fbc45ff81054e220200000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004081000418e00000004fcff", 0xfed1}], 0x1) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000001c0)={@local, @empty, 0x1, 0x8, [@multicast2, @remote, @multicast1, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x3e}, @dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x30) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000140)='cpuset.memory_spread_page\x00', 0x2, 0x0) sendfile(r5, r3, 0x0, 0x100000000) 06:35:21 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x0, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x100) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1024.334342][ C0] sd 0:0:1:0: [sg0] tag#6627 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1024.345199][ C0] sd 0:0:1:0: [sg0] tag#6627 CDB: Test Unit Ready [ 1024.351897][ C0] sd 0:0:1:0: [sg0] tag#6627 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1024.361885][ C0] sd 0:0:1:0: [sg0] tag#6627 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1024.371784][ C0] sd 0:0:1:0: [sg0] tag#6627 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1024.381781][ C0] sd 0:0:1:0: [sg0] tag#6627 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1024.391784][ C0] sd 0:0:1:0: [sg0] tag#6627 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1024.401952][ C0] sd 0:0:1:0: [sg0] tag#6627 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1024.411960][ C0] sd 0:0:1:0: [sg0] tag#6627 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1024.421905][ C0] sd 0:0:1:0: [sg0] tag#6627 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1024.431804][ C0] sd 0:0:1:0: [sg0] tag#6627 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1024.441832][ C0] sd 0:0:1:0: [sg0] tag#6627 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1024.454592][ C0] sd 0:0:1:0: [sg0] tag#6627 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1024.464678][ C0] sd 0:0:1:0: [sg0] tag#6627 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1024.474716][ C0] sd 0:0:1:0: [sg0] tag#6627 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06:35:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_pts(r0, 0x1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r2, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r3, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) r4 = socket$inet(0xa, 0x801, 0x84) sendmsg$inet(r4, &(0x7f00000026c0)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x81e}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000002c0)="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", 0x1c5}], 0x1}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) listen(r4, 0x3) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000480)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000780)={r7, 0x70, "2f00e812e554d8fdb595f40ac122b26a09e2261c8b16033625fa0c9be4be7fbfcedb2f1066f5b7ed3dce5e4175bc78985a34e1444b8f73a669e77ce516fb931540e3786b57befd8a77958168ac1e6b61f22e34b37391b83f72df04e1a3c441eed5cfe3fb5ea1bc321b1c62bdc7a596d3"}, &(0x7f0000000140)=0x78) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f00000019c0)={r7, 0x1000, "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"}, &(0x7f0000000040)=0x1008) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000002a00)=@sack_info={r8, 0x3ff, 0x1}, &(0x7f0000002a40)=0xc) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) write$binfmt_elf64(r9, &(0x7f0000001200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0xf8, 0x7f, 0x1f, 0x973, 0x2, 0x3, 0x101, 0x15d, 0x40, 0x2a6, 0x3685, 0x3, 0x38, 0x1, 0x2000, 0x8, 0x4a}, [{0x6474e551, 0x8, 0x401, 0x401, 0x4, 0x2, 0x8, 0x10001}], "399985bd24be65959f8f79036c1f30a76fdc9f3c3f6a9a84007d234481a27f0b0196a81225bb562fdb2285e8927c2fb0cac56cfcf9", [[], [], [], [], [], [], []]}, 0x7ad) exit(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) [ 1024.484701][ C0] sd 0:0:1:0: [sg0] tag#6627 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1024.494760][ C0] sd 0:0:1:0: [sg0] tag#6627 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 1024.585851][ T7019] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 06:35:21 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x0, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x100) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1024.868336][ C0] sd 0:0:1:0: [sg0] tag#6628 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1024.879113][ C0] sd 0:0:1:0: [sg0] tag#6628 CDB: Test Unit Ready [ 1024.885900][ C0] sd 0:0:1:0: [sg0] tag#6628 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1024.896000][ C0] sd 0:0:1:0: [sg0] tag#6628 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1024.905910][ C0] sd 0:0:1:0: [sg0] tag#6628 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1024.915854][ C0] sd 0:0:1:0: [sg0] tag#6628 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1024.925731][ C0] sd 0:0:1:0: [sg0] tag#6628 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1024.935726][ C0] sd 0:0:1:0: [sg0] tag#6628 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1024.947456][ C0] sd 0:0:1:0: [sg0] tag#6628 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1024.957356][ C0] sd 0:0:1:0: [sg0] tag#6628 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1024.967765][ C0] sd 0:0:1:0: [sg0] tag#6628 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1024.977749][ C0] sd 0:0:1:0: [sg0] tag#6628 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1024.987650][ C0] sd 0:0:1:0: [sg0] tag#6628 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1024.997613][ C0] sd 0:0:1:0: [sg0] tag#6628 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1025.007479][ C0] sd 0:0:1:0: [sg0] tag#6628 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06:35:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r2, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r2, &(0x7f0000000700)={&(0x7f00000004c0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @broadcast}, 0x1, 0x0, 0x2, 0x4}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000540)="8344c3adf16c2f54332963dc257a4e1ac825dba2250ca0c2b931335bb06b0c9c3a648e07913f4cde98b86c25845094d68ea534e5608fec8d229f8db47ac98ca757b62c97a93195aa5e245ba7bfae9b357c77ba6ef7bfdf129110817b3e71d050def195a1ad105502bbd05568a86802fe8667e24aaf47f3d8b74f", 0x7a}, {&(0x7f00000005c0)="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", 0xfe}], 0x2, &(0x7f0000000800)=[{0xc8, 0x1, 0x20, "180aa109436c354fd22010d8ecbbba823821fa282ac763b0748ca1fc9f646a05a280a80d437681803ac2b10b3dc75e26d70879d1954b7d48fcf4bb1ceb0d4cc5ce1ff9589b815070a0e32a0e451178424815c54268a620221737b0854f2bd39838eb67c8694d2858bd584415b7f3e6a2b4c15c37b1bd4070cc41fe3988685729c54ac2c2917174a728727c72fc265ce6ad3cbc3f2fd4a8f768cf2937678dfaafaa37ea3e031ac5ca41b085edd87d306a190a3cb2d9f089fc"}, {0xb8, 0x11, 0xb7, "17c5a77daf7e1a5b6008c5f5ef753ef2f1f3a044bffd329f683b622470a11a515c5422cdf1b36f2df5d2e7632323b235488ede80aefa08f67253e32680b8a40aed1f7ab7012eb2f8af0cb12d6c93d42db19b2262e77b51a5824be0152af8d0965ea73e1e1e6b4b800f3175ec81e1f1785e22671621e8d2060ef898b38e80707bcf1cb36093ac3baef4a35dcb9ecd9b5873845a51cda160aa51f23fd8a95d7d2685849705c2a4"}, {0x18, 0x101, 0x9, "6128b047929302"}], 0x198}, 0x20000001) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x70, 0x3, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_LABELS_MASK={0x14, 0x17, [0x7, 0xdc0, 0x3, 0x8]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_ZONE={0x6}, @CTA_NAT_SRC={0x30, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x24040000}, 0x4004000) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) r6 = accept4$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) r7 = socket$inet(0xa, 0x801, 0x84) sendmsg$inet(r7, &(0x7f00000026c0)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x81e}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000002c0)="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", 0x1c5}], 0x1}, 0x0) listen(r7, 0x3) r8 = accept4(r7, 0x0, 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000480)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f0000000780)={r10, 0x70, "2f00e812e554d8fdb595f40ac122b26a09e2261c8b16033625fa0c9be4be7fbfcedb2f1066f5b7ed3dce5e4175bc78985a34e1444b8f73a669e77ce516fb931540e3786b57befd8a77958168ac1e6b61f22e34b37391b83f72df04e1a3c441eed5cfe3fb5ea1bc321b1c62bdc7a596d3"}, &(0x7f0000000140)=0x78) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000200)={r10}, 0x8) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) [ 1025.017366][ C0] sd 0:0:1:0: [sg0] tag#6628 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1025.027265][ C0] sd 0:0:1:0: [sg0] tag#6628 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:35:22 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x0, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x100) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1025.475433][ C1] sd 0:0:1:0: [sg0] tag#6629 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1025.486134][ C1] sd 0:0:1:0: [sg0] tag#6629 CDB: Test Unit Ready [ 1025.492918][ C1] sd 0:0:1:0: [sg0] tag#6629 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1025.502784][ C1] sd 0:0:1:0: [sg0] tag#6629 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1025.512641][ C1] sd 0:0:1:0: [sg0] tag#6629 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1025.522599][ C1] sd 0:0:1:0: [sg0] tag#6629 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1025.532426][ C1] sd 0:0:1:0: [sg0] tag#6629 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1025.542809][ C1] sd 0:0:1:0: [sg0] tag#6629 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1025.552670][ C1] sd 0:0:1:0: [sg0] tag#6629 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1025.562606][ C1] sd 0:0:1:0: [sg0] tag#6629 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1025.572451][ C1] sd 0:0:1:0: [sg0] tag#6629 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1025.582418][ C1] sd 0:0:1:0: [sg0] tag#6629 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1025.592277][ C1] sd 0:0:1:0: [sg0] tag#6629 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1025.602177][ C1] sd 0:0:1:0: [sg0] tag#6629 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1025.611919][ C1] sd 0:0:1:0: [sg0] tag#6629 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06:35:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) finit_module(r0, &(0x7f0000000040)='/dev/ptmx\x00', 0x3) r1 = syz_open_pts(r0, 0x1) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) 06:35:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x7, 0x20}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) [ 1025.621799][ C1] sd 0:0:1:0: [sg0] tag#6629 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1025.631766][ C1] sd 0:0:1:0: [sg0] tag#6629 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:35:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x8001) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="ec8070afb04c79c82d7b020a000007000000000000000000000005001a00ac141400000000000000000000000000ac1e0001000000000000"], 0x38}}, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000)) 06:35:23 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x0, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x100) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') 06:35:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x14}]}, 0x38}}, 0x0) [ 1026.232558][ C0] sd 0:0:1:0: [sg0] tag#6630 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1026.243464][ C0] sd 0:0:1:0: [sg0] tag#6630 CDB: Test Unit Ready [ 1026.250105][ C0] sd 0:0:1:0: [sg0] tag#6630 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1026.260071][ C0] sd 0:0:1:0: [sg0] tag#6630 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1026.269996][ C0] sd 0:0:1:0: [sg0] tag#6630 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1026.280006][ C0] sd 0:0:1:0: [sg0] tag#6630 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1026.290221][ C0] sd 0:0:1:0: [sg0] tag#6630 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1026.300204][ C0] sd 0:0:1:0: [sg0] tag#6630 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1026.310295][ C0] sd 0:0:1:0: [sg0] tag#6630 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1026.320346][ C0] sd 0:0:1:0: [sg0] tag#6630 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1026.330877][ C0] sd 0:0:1:0: [sg0] tag#6630 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1026.341248][ C0] sd 0:0:1:0: [sg0] tag#6630 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1026.351289][ C0] sd 0:0:1:0: [sg0] tag#6630 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1026.361227][ C0] sd 0:0:1:0: [sg0] tag#6630 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1026.371124][ C0] sd 0:0:1:0: [sg0] tag#6630 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1026.381055][ C0] sd 0:0:1:0: [sg0] tag#6630 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1026.390919][ C0] sd 0:0:1:0: [sg0] tag#6630 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:35:23 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, 0x0, 0x0) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x100) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') 06:35:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a0000db78db5c2e070000a7ad0000000000000005001a00ac141400008000000000000000000000ac1e000100"/61], 0x38}}, 0x0) [ 1026.635542][ C0] sd 0:0:1:0: [sg0] tag#6631 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1026.646362][ C0] sd 0:0:1:0: [sg0] tag#6631 CDB: Test Unit Ready [ 1026.653155][ C0] sd 0:0:1:0: [sg0] tag#6631 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1026.663064][ C0] sd 0:0:1:0: [sg0] tag#6631 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1026.673087][ C0] sd 0:0:1:0: [sg0] tag#6631 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1026.683039][ C0] sd 0:0:1:0: [sg0] tag#6631 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1026.693002][ C0] sd 0:0:1:0: [sg0] tag#6631 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1026.702973][ C0] sd 0:0:1:0: [sg0] tag#6631 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1026.713222][ C0] sd 0:0:1:0: [sg0] tag#6631 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1026.723107][ C0] sd 0:0:1:0: [sg0] tag#6631 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1026.733176][ C0] sd 0:0:1:0: [sg0] tag#6631 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1026.743056][ C0] sd 0:0:1:0: [sg0] tag#6631 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1026.752978][ C0] sd 0:0:1:0: [sg0] tag#6631 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1026.762843][ C0] sd 0:0:1:0: [sg0] tag#6631 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1026.772765][ C0] sd 0:0:1:0: [sg0] tag#6631 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1026.782630][ C0] sd 0:0:1:0: [sg0] tag#6631 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1026.792602][ C0] sd 0:0:1:0: [sg0] tag#6631 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:35:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000007000000000000000000000005001a00aced28562a6eba820600000000000000ac1e000100000000000000000000000000000000a216c5736db908154e69075c9a43aeb537fd50c6a35fa035db99fcf4f6e66cd458f0757eae7d77ba63975895d6b62543010c2c43ec771c0f01009a1102c558b2b37168769e7780881720ec2e531f122be461679075dee5cb0e0900000014151154bc1a147ab9eafe0f5c8448bbf13f56babf2319b1786d4f36600c558c4853756243d221fad846a7f991552296b976a4405efa5e1e95781b3a15bc944eb4fa5e15e5edc77b39e75e8b1210db"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x64, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533bf5423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0xffffffb7}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}, @CTA_EXPECT_MASTER={0x4}]}, 0x64}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000040)=r8) r9 = socket$nl_route(0x10, 0x3, 0x0) fcntl$notify(r9, 0x402, 0x80000002) 06:35:24 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000ffff0000000000009820000000003b086803ffff633b27e59aa14417000000006d17c3f2c876c69901000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680814966ff9f2d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee09aa272c56100c796d74c92fad7e34bd5f0e4542636c2cb6222bc224649282af53ba5f496b75b8a42657e0c0a675cc276304f3c1955e3e18f161d21d606f2ef2a7ec42902015d553235041a8a08a6d0470d519f61067d7e38717e69aa37681e5711a657e80950afb00e24f3f9567a61f77f817eaaa7af8e75e847a57fb014eb65fc813258f995a0505f1baa5d318fdaee68ff2be4f913f5cc8e883f0900000000000000c5a8a00e5085b900"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x0, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x100) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1027.473362][ C1] sd 0:0:1:0: [sg0] tag#6632 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1027.484077][ C1] sd 0:0:1:0: [sg0] tag#6632 CDB: Test Unit Ready [ 1027.490704][ C1] sd 0:0:1:0: [sg0] tag#6632 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1027.500619][ C1] sd 0:0:1:0: [sg0] tag#6632 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1027.510471][ C1] sd 0:0:1:0: [sg0] tag#6632 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1027.520376][ C1] sd 0:0:1:0: [sg0] tag#6632 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1027.530213][ C1] sd 0:0:1:0: [sg0] tag#6632 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1027.540113][ C1] sd 0:0:1:0: [sg0] tag#6632 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1027.550052][ C1] sd 0:0:1:0: [sg0] tag#6632 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1027.559899][ C1] sd 0:0:1:0: [sg0] tag#6632 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1027.569787][ C1] sd 0:0:1:0: [sg0] tag#6632 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1027.579644][ C1] sd 0:0:1:0: [sg0] tag#6632 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1027.589535][ C1] sd 0:0:1:0: [sg0] tag#6632 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1027.599374][ C1] sd 0:0:1:0: [sg0] tag#6632 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1027.609259][ C1] sd 0:0:1:0: [sg0] tag#6632 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1027.619109][ C1] sd 0:0:1:0: [sg0] tag#6632 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1027.629054][ C1] sd 0:0:1:0: [sg0] tag#6632 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:35:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r2, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000000), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) 06:35:24 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000ffff0000000000009820000000003b086803ffff633b27e59aa14417000000006d17c3f2c876c69901000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680814966ff9f2d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee09aa272c56100c796d74c92fad7e34bd5f0e4542636c2cb6222bc224649282af53ba5f496b75b8a42657e0c0a675cc276304f3c1955e3e18f161d21d606f2ef2a7ec42902015d553235041a8a08a6d0470d519f61067d7e38717e69aa37681e5711a657e80950afb00e24f3f9567a61f77f817eaaa7af8e75e847a57fb014eb65fc813258f995a0505f1baa5d318fdaee68ff2be4f913f5cc8e883f0900000000000000c5a8a00e5085b900"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, 0x0, 0x0) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x100) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1027.901692][ C1] sd 0:0:1:0: [sg0] tag#6633 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1027.912478][ C1] sd 0:0:1:0: [sg0] tag#6633 CDB: Test Unit Ready [ 1027.919115][ C1] sd 0:0:1:0: [sg0] tag#6633 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1027.929052][ C1] sd 0:0:1:0: [sg0] tag#6633 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1027.938915][ C1] sd 0:0:1:0: [sg0] tag#6633 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1027.948995][ C1] sd 0:0:1:0: [sg0] tag#6633 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1027.958937][ C1] sd 0:0:1:0: [sg0] tag#6633 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1027.969263][ C1] sd 0:0:1:0: [sg0] tag#6633 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1027.979103][ C1] sd 0:0:1:0: [sg0] tag#6633 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1027.989007][ C1] sd 0:0:1:0: [sg0] tag#6633 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1027.998851][ C1] sd 0:0:1:0: [sg0] tag#6633 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1028.008751][ C1] sd 0:0:1:0: [sg0] tag#6633 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1028.018605][ C1] sd 0:0:1:0: [sg0] tag#6633 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1028.028501][ C1] sd 0:0:1:0: [sg0] tag#6633 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1028.038434][ C1] sd 0:0:1:0: [sg0] tag#6633 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1028.048384][ C1] sd 0:0:1:0: [sg0] tag#6633 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1028.058235][ C1] sd 0:0:1:0: [sg0] tag#6633 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:35:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)={0x8, 0x8, 0x4, 0x1000000, 0xb024, {0x77359400}, {0x4, 0x1, 0x0, 0x5, 0xac, 0x77, "826cf091"}, 0x800, 0x2, @userptr=0x4, 0x3, 0x0, r2}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a000007000000000000000000000005001a00ac141400000000000000000000000000000700010000000069d37581a976f1ed828d624e00"/68], 0x44}}, 0x10) 06:35:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) r6 = getgid() r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r9, r9, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) r12 = fcntl$dupfd(r11, 0x0, r11) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r13, r13, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r14, 0x0) r15 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r16 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r16, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r16, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r9, r10, r13, r14, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r15, r16, 0x5}) getgroups(0x1, &(0x7f0000000100)=[0xffffffffffffffff]) r18 = getgid() r19 = getgid() r20 = getgid() r21 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r21, 0x0, r21) r22 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000340)=0xc) setresuid(r23, r23, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r24) r25 = socket$inet_tcp(0x2, 0x1, 0x0) r26 = fcntl$dupfd(r25, 0x0, r25) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r27, r27, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r28, 0x0) r29 = clone3(&(0x7f0000001680)={0x80801200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r30 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r30, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r30, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r23, r24, r27, r28, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r29, r30, 0x5}) r31 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280)='/dev/urandom\x00', 0x0, 0x0) r32 = fcntl$dupfd(r31, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(r32, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r33, r33, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r34) r35 = socket$inet_tcp(0x2, 0x1, 0x0) r36 = fcntl$dupfd(r35, 0x0, r35) getsockopt$sock_cred(r36, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r37, r37, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r38, 0x0) r39 = clone3(&(0x7f0000001680)={0x4001100, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0}, 0x50) r40 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r40, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r40, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r33, r34, r37, r38, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r39, r40, 0x5}) getgroups(0x4, &(0x7f0000000180)=[0xffffffffffffffff, r24, 0x0, r34]) r41 = getgid() r42 = socket$inet_tcp(0x2, 0x1, 0x0) r43 = fcntl$dupfd(r42, 0x0, r42) getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r44, r44, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r45) r46 = socket$inet_tcp(0x2, 0x1, 0x0) r47 = fcntl$dupfd(r46, 0x0, r46) getsockopt$sock_cred(r47, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r48, r48, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r49, 0x0) r50 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(0x0, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, 0x0, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r44, r45, r48, r49, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r50, 0x0, 0x5}) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="02000000010002000000000002000400", @ANYRES32=r5, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="0400050000f8aab68f08906d", @ANYRES32=r6, @ANYBLOB, @ANYRES32=r14, @ANYBLOB="08000400", @ANYRES32=r17, @ANYBLOB="08000400", @ANYRES32=r18, @ANYBLOB="08000200", @ANYRES32=r19, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r20, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r24, @ANYBLOB="08000e00cfa3e5528e7a3048e0726c818c193f70545b035cd6fe4d28d7646778809e2e13f6c3879166f845fa9351d2e3855234d223487b632257e086d78465587181bf024dfa10496204a332ae8101d719b37b2b0c49c58c5e2f259208a6277bc1b0dec1c43eae3939f6631f381aa13c52c6a698c84ad186216f20b42706e1c9f2fd8021e862647953db9c554442a0747777d57c209f83eedaaab315b1883230ee7fff23c8b8", @ANYRES32=r41, @ANYBLOB="81f0ffd5e2ec0f290e00", @ANYRES32=r49, @ANYBLOB="10000500000000002000070000000000"], 0x7c, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000200)={0x7, 0xfffffffb, 0x2, 0xc1c, [], [], [], 0x5c, 0x0, 0x3ff, 0x3ff, "fc7094682e750f281defd8bd03ccd980"}) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) [ 1028.387641][ T7093] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. 06:35:25 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x300) r5 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) socketpair(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) r8 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000000011905000000000000000000000000240001001400010008000100ac1414aa08000200e00000000c0002000500010000000000240002000c000200050001000000000014000100080001000000000008000200000000000800070000000000100005"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 06:35:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) [ 1028.694112][ T7100] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:35:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@multicast1}]}, 0x38}}, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x80) 06:35:26 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, 0x0, 0x0) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x100) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1029.288790][ C1] sd 0:0:1:0: [sg0] tag#6644 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1029.299638][ C1] sd 0:0:1:0: [sg0] tag#6644 CDB: Test Unit Ready [ 1029.306396][ C1] sd 0:0:1:0: [sg0] tag#6644 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1029.316233][ C1] sd 0:0:1:0: [sg0] tag#6644 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1029.326142][ C1] sd 0:0:1:0: [sg0] tag#6644 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1029.336059][ C1] sd 0:0:1:0: [sg0] tag#6644 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1029.346251][ C1] sd 0:0:1:0: [sg0] tag#6644 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1029.356219][ C1] sd 0:0:1:0: [sg0] tag#6644 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1029.366145][ C1] sd 0:0:1:0: [sg0] tag#6644 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1029.376052][ C1] sd 0:0:1:0: [sg0] tag#6644 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1029.385963][ C1] sd 0:0:1:0: [sg0] tag#6644 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1029.395902][ C1] sd 0:0:1:0: [sg0] tag#6644 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1029.406325][ C1] sd 0:0:1:0: [sg0] tag#6644 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1029.416199][ C1] sd 0:0:1:0: [sg0] tag#6644 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1029.426241][ C1] sd 0:0:1:0: [sg0] tag#6644 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1029.436106][ C1] sd 0:0:1:0: [sg0] tag#6644 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1029.446195][ C1] sd 0:0:1:0: [sg0] tag#6644 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:35:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r2, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) r3 = accept$packet(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x14) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000380)={0x1, 0x1, 0x1000, 0x3, &(0x7f0000000100)="267da8", 0xfe, 0x0, &(0x7f0000000200)="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"}) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'security.', '{\x00'}, &(0x7f0000000040)='\x00', 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="020a00000700000000000000000000ac141400000000000000000000000000ac1e000100"/56], 0x38}}, 0x0) 06:35:27 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x8040, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x0, 0xfffffffffffffffe, 0x9a, 0x9, @scatter={0x1, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)=""/241, 0xf1}]}, &(0x7f0000000500)="51ba6cbb9b46417a15de7e458fd5f5bf83d69bbe5d1ebbd25acb22be259e743b46f8ce3331fa1fe25722cb82d742c0a5084ceba568a69b511ca7cbf3d97a04798efbd56041ebf75e3c7dca7c1fb0cb36d3d1cc7fb6964cda308bd6558b64163b855db8722dbade6d1eb04733496273a4f66bd53e518b42267ea46a4b0530c46f1078eb9be4d195e9229cac7d2d9f879da172513d59f210364cd3", &(0x7f0000000340), 0x7, 0x4, 0xffffffffffffffff, &(0x7f0000000380)}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={@remote, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev={0xfe, 0x80, [], 0x32}, 0x10000, 0x7, 0xf6c, 0x180, 0x6, 0x2000000, r6}) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb6ab904044865160b00170002020000000004140e00090002000000dc2976d153b4", 0x2e}], 0x1e2}, 0x0) [ 1030.096422][ T7137] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1030.194840][ T7139] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 06:35:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x6, 0x4) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000200)={0x7fffffff, 0x2, 0x4, 0x2000000, 0xa92, {0x0, 0x2710}, {0x2, 0x2, 0xff, 0x5, 0x83, 0x2, "4789d48e"}, 0x100, 0x0, @fd, 0xff, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_BUFS(r6, 0xc0206416, &(0x7f0000000280)={0x863, 0x7, 0xffffff01, 0x2, 0x0, 0x3}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="000200000000000028001200090001007665746800"/36, @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000006c0)={'vcan0\x00', r9}) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) open_by_handle_at(r14, &(0x7f0000000300)={0x91, 0x3, "1030a05e54fb421e0ff2b664d7af67fd97f826675b1f6f7db5d413b641abe832766f281c6fc828fe9239f47edeec7fff3f16fd81dd84d8dfbc83887e05d133c23e8114639e28c1959d8e3792cbd05db4acbefab1eda4d9513cce6b66d8871375bcc8fd476cf62bfc1655111c0a72b5544fd33dd85b0954e576b946f2df4bc5bfdbe00e70a5893e1dcf"}, 0x2) r15 = socket$netlink(0x10, 0x3, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r15, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r17, @ANYBLOB="000200000000000028001200090001007665746800"/36, @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r17}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}}, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000700)={0x0, @in={0x2, 0x4e23, @local}, @xdp={0x2c, 0x0, r10, 0x15}, @can={0x1d, r17}, 0x4, 0x0, 0x0, 0x0, 0x401, 0x0, 0x4, 0x101, 0x5}) sendfile(r0, r1, 0x0, 0xa808) 06:35:27 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000ffff0000000000009820000000003b086803ffff633b27e59aa14417000000006d17c3f2c876c69901000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680814966ff9f2d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee09aa272c56100c796d74c92fad7e34bd5f0e4542636c2cb6222bc224649282af53ba5f496b75b8a42657e0c0a675cc276304f3c1955e3e18f161d21d606f2ef2a7ec42902015d553235041a8a08a6d0470d519f61067d7e38717e69aa37681e5711a657e80950afb00e24f3f9567a61f77f817eaaa7af8e75e847a57fb014eb65fc813258f995a0505f1baa5d318fdaee68ff2be4f913f5cc8e883f0900000000000000c5a8a00e5085b900"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x100) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') 06:35:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000100)={0x2, [0x0, 0x0]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) socketpair(0x22, 0x80000, 0x1, &(0x7f0000000300)={0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) r6 = socket$inet(0xa, 0x801, 0x84) sendmsg$inet(r6, &(0x7f00000026c0)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x81e}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000002c0)="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", 0x1c5}], 0x1}, 0x0) listen(r6, 0x3) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000480)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000780)={r9, 0x70, "2f00e812e554d8fdb595f40ac122b26a09e2261c8b16033625fa0c9be4be7fbfcedb2f1066f5b7ed3dce5e4175bc78985a34e1444b8f73a669e77ce516fb931540e3786b57befd8a77958168ac1e6b61f22e34b37391b83f72df04e1a3c441eed5cfe3fb5ea1bc321b1c62bdc7a596d3"}, &(0x7f0000000140)=0x78) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000340)={r9, 0x7f, 0x1ff}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000003c0)={r10, 0x2}, &(0x7f0000000400)=0xc) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a000007000000000000000000000005001a00ac141400000000010000000000000000ac1e0001000000000000000000000000005c98a157d0a30ae3e900000014c4edb896cc2bff6c1ee4cc8e893ab7e3318e039ac6dfd10628e3e0b850e70db4c06be3be3c44e0f96a17dbb617379a0e1395de4f7461a0494a93f0f50fd9c4c0886a12"], 0x38}}, 0x0) [ 1030.596018][ T7147] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1030.654313][ C1] sd 0:0:1:0: [sg0] tag#6645 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1030.665042][ C1] sd 0:0:1:0: [sg0] tag#6645 CDB: Test Unit Ready [ 1030.671675][ C1] sd 0:0:1:0: [sg0] tag#6645 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1030.681615][ C1] sd 0:0:1:0: [sg0] tag#6645 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1030.691533][ C1] sd 0:0:1:0: [sg0] tag#6645 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1030.701442][ C1] sd 0:0:1:0: [sg0] tag#6645 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1030.711300][ C1] sd 0:0:1:0: [sg0] tag#6645 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1030.721267][ C1] sd 0:0:1:0: [sg0] tag#6645 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1030.731246][ C1] sd 0:0:1:0: [sg0] tag#6645 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1030.741136][ C1] sd 0:0:1:0: [sg0] tag#6645 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1030.751048][ C1] sd 0:0:1:0: [sg0] tag#6645 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1030.760990][ C1] sd 0:0:1:0: [sg0] tag#6645 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1030.770850][ C1] sd 0:0:1:0: [sg0] tag#6645 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1030.780911][ C1] sd 0:0:1:0: [sg0] tag#6645 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1030.790915][ C1] sd 0:0:1:0: [sg0] tag#6645 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1030.801378][ C1] sd 0:0:1:0: [sg0] tag#6645 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1030.811329][ C1] sd 0:0:1:0: [sg0] tag#6645 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:35:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x36001) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) [ 1030.858511][ T7155] batman_adv: batadv0: Adding interface: macvlan2 [ 1030.865293][ T7155] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1030.892350][ T7155] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 1031.057591][ T7147] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1031.152400][ T7147] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1031.249928][ T7155] batman_adv: batadv0: Adding interface: macvlan3 [ 1031.256759][ T7155] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.282527][ T7155] batman_adv: batadv0: Not using interface macvlan3 (retrying later): interface not active 06:35:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r2, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) r3 = socket$inet(0xa, 0x801, 0x84) sendmsg$inet(r3, &(0x7f00000026c0)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x81e}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000002c0)="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", 0x1c5}], 0x1}, 0x0) listen(r3, 0x3) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="186c5b57", @ANYRES32=0x0], &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000780)={r6, 0x70, "2f00e812e554d8fdb595f40ac122b26a09e2261c8b16033625fa0c9be4be7fbfcedb2f1066f5b7ed3dce5e4175bc78985a34e1444b8f73a669e77ce516fb931540e3786b57befd8a77958168ac1e6b61f22e34b37391b83f72df04e1a3c441eed5cfe3fb5ea1bc321b1c62bdc7a596d3"}, &(0x7f0000000140)=0x78) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={r6, @in={{0x2, 0x4e24, @local}}, 0x4, 0xf8, 0x0, 0x0, 0x10, 0x1, 0x9}, 0x9c) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-camellia-aesni\x00'}, 0x58) 06:35:28 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000ffff0000000000009820000000003b086803ffff633b27e59aa14417000000006d17c3f2c876c69901000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680814966ff9f2d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee09aa272c56100c796d74c92fad7e34bd5f0e4542636c2cb6222bc224649282af53ba5f496b75b8a42657e0c0a675cc276304f3c1955e3e18f161d21d606f2ef2a7ec42902015d553235041a8a08a6d0470d519f61067d7e38717e69aa37681e5711a657e80950afb00e24f3f9567a61f77f817eaaa7af8e75e847a57fb014eb65fc813258f995a0505f1baa5d318fdaee68ff2be4f913f5cc8e883f0900000000000000c5a8a00e5085b900"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x100) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1031.690697][ T7162] batman_adv: batadv0: Adding interface: macvlan4 [ 1031.697711][ T7162] batman_adv: batadv0: The MTU of interface macvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.723986][ T7162] batman_adv: batadv0: Not using interface macvlan4 (retrying later): interface not active [ 1031.815600][ C1] sd 0:0:1:0: [sg0] tag#6646 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1031.826313][ C1] sd 0:0:1:0: [sg0] tag#6646 CDB: Test Unit Ready [ 1031.833106][ C1] sd 0:0:1:0: [sg0] tag#6646 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1031.842983][ C1] sd 0:0:1:0: [sg0] tag#6646 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1031.852862][ C1] sd 0:0:1:0: [sg0] tag#6646 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1031.862782][ C1] sd 0:0:1:0: [sg0] tag#6646 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1031.872761][ C1] sd 0:0:1:0: [sg0] tag#6646 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1031.882613][ C1] sd 0:0:1:0: [sg0] tag#6646 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1031.892472][ C1] sd 0:0:1:0: [sg0] tag#6646 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1031.902348][ C1] sd 0:0:1:0: [sg0] tag#6646 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06:35:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x1000000, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in6=@loopback, 0xa}]}, 0x38}}, 0xc1) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r5, r4, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r10, r9, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x291ffffeffffff) ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f0000000100)={0x2, 0x3, 0x46ec, 0x4, 0x2, [0x7, 0xffffffff, 0x7, 0x7f], [0x0, 0x7fff, 0x8, 0x68], [0x9, 0x2, 0x203, 0x4], [0x3, 0x7b5, 0x7f, 0x8000]}) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="84000000000201040000000000000000000000003c0002802c00018014000300c21c062a396c4533d15423b10aa8c37014000400fe8000000000000000000000000000aa0c0002800500010000000000300003802c00018004000300fe8800000000000000000000000000f4140004000000000000000000000000000000000104000180"], 0x84}}, 0x0) r12 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video2\x00', 0x2, 0x0) fcntl$dupfd(r11, 0x0, r12) ioctl(r6, 0x3ff, &(0x7f0000000200)="133b8fba5f065831c22efe52fd6e6c8097643440be97b82ebf74fd9d13dc0be505dd3302a89866d0df968baa0ed7f941ce5216ff020772250ac1546b9391ebaee6ff33b335586ea07cd38655278fc744cbea0b50a89cdf2210f0f56ee39d337aa064420a7157bb2272b6c4a1fc4a7c1b16ee3d32211bbac1e58b1412f2fb33bdf8b96578e8c219a545631f") ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000180)=0x5) write(r3, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000000)=0x2, 0x4) [ 1031.912321][ C1] sd 0:0:1:0: [sg0] tag#6646 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1031.922209][ C1] sd 0:0:1:0: [sg0] tag#6646 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1031.932096][ C1] sd 0:0:1:0: [sg0] tag#6646 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1031.942164][ C1] sd 0:0:1:0: [sg0] tag#6646 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1031.951925][ C1] sd 0:0:1:0: [sg0] tag#6646 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1031.961842][ C1] sd 0:0:1:0: [sg0] tag#6646 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1031.971802][ C1] sd 0:0:1:0: [sg0] tag#6646 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 1032.095975][ T7178] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1032.106719][ T7155] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 06:35:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x9) r5 = syz_open_pts(r0, 0x1) write(r5, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) [ 1032.194075][ T7147] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:35:29 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x181000, 0x0) accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1, 0xb0f1, 0x1ff}}, 0x30) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0xffffffffffffffff) clone(0x4413cd00, 0x0, 0x0, 0x0, 0x0) 06:35:29 executing program 3: ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xc, 0x3, 0x3, 0x2}, 0x10}}, 0x0) [ 1032.654839][ T7190] IPVS: ftp: loaded support on port[0] = 21 06:35:29 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x100) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1032.911515][ C0] sd 0:0:1:0: [sg0] tag#6647 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1032.922270][ C0] sd 0:0:1:0: [sg0] tag#6647 CDB: Test Unit Ready [ 1032.928915][ C0] sd 0:0:1:0: [sg0] tag#6647 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1032.938872][ C0] sd 0:0:1:0: [sg0] tag#6647 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1032.948861][ C0] sd 0:0:1:0: [sg0] tag#6647 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1032.959011][ C0] sd 0:0:1:0: [sg0] tag#6647 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1032.968927][ C0] sd 0:0:1:0: [sg0] tag#6647 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1032.978835][ C0] sd 0:0:1:0: [sg0] tag#6647 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1032.988744][ C0] sd 0:0:1:0: [sg0] tag#6647 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1032.998636][ C0] sd 0:0:1:0: [sg0] tag#6647 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1033.008594][ C0] sd 0:0:1:0: [sg0] tag#6647 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1033.018590][ C0] sd 0:0:1:0: [sg0] tag#6647 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1033.028542][ C0] sd 0:0:1:0: [sg0] tag#6647 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1033.038482][ C0] sd 0:0:1:0: [sg0] tag#6647 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1033.038595][ C0] sd 0:0:1:0: [sg0] tag#6647 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1033.038702][ C0] sd 0:0:1:0: [sg0] tag#6647 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1033.038829][ C0] sd 0:0:1:0: [sg0] tag#6647 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:35:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in6=@rand_addr="927ca2e95025578b4381f3ec0037bd80"}]}, 0x38}}, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x4000, 0x0) [ 1033.215776][T11537] tipc: TX() has been purged, node left! 06:35:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x1, 0xfffffffc}) pipe(&(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x1) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x30002, 0x0) ioctl$VIDIOC_S_PRIORITY(r2, 0x40045644, 0x3) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x5a1000, 0x0) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) 06:35:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x0, 0x0, 0x0, {0x11}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2bd5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0xe9, "da7bf7c3ac188061036664e26af7b413e55ef3af9b843fff27da25b3352aec84294059c56ba6d0b5cf26511ab09ac598cb0ec0ae8183ed248fcbb829624fdb04966a6681b524a12570c73a121c4686cb2bb1101c45b0074df8ce0abcaecaaf3cd69bc83ef81dd1f6668a76ea5169b815c06f34851d11836beaa8f927cde8734024c1cf5518f2a31146c78f2773ebe967175135d70a3ba8590aee65012b40ef3f8e67618feddc6b67996a4c3abaa8a497359c0dd2e4f5d009e2c506c9e885a966d2a681ca7d72fb97e6ff46c8763b3f7423b142888a69d4036a60722d0f073767281c7456796eaca462"}, &(0x7f0000000100)=0xf1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_GET_CPUID2(r2, 0x4400ae8f, &(0x7f0000000200)=ANY=[]) 06:35:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="020a00aa94ec9601c97fe5000000000005001a00ac141400000000000000000000000000ac1e00010000000000000000000000009f49c145"], 0x38}}, 0x0) 06:35:30 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, 0x0, 0x100) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') 06:35:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r3, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) r4 = accept$inet6(r3, 0x0, &(0x7f0000000140)) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000200), &(0x7f0000000240)=0xc) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="020a000007000000000000000000000005001400ac141400000000000000222af7b00000ac3b000100000000000800"/56], 0x38}}, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=[0x5, 0x4, 0x1, 0x7, 0xff], &(0x7f0000000040)=[0x8, 0x10001, 0x31e, 0x101, 0x401, 0x4, 0x7fffffff, 0xb494, 0x54f], &(0x7f0000000080)=[0x3, 0x7, 0x60a, 0x6, 0x100], &(0x7f00000000c0)=[0x0, 0x7ff], 0x0, 0x2}) [ 1034.128579][ C1] sd 0:0:1:0: [sg0] tag#6593 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1034.139275][ C1] sd 0:0:1:0: [sg0] tag#6593 CDB: Test Unit Ready [ 1034.146086][ C1] sd 0:0:1:0: [sg0] tag#6593 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1034.155946][ C1] sd 0:0:1:0: [sg0] tag#6593 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1034.165766][ C1] sd 0:0:1:0: [sg0] tag#6593 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1034.175685][ C1] sd 0:0:1:0: [sg0] tag#6593 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1034.185673][ C1] sd 0:0:1:0: [sg0] tag#6593 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1034.195519][ C1] sd 0:0:1:0: [sg0] tag#6593 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1034.205376][ C1] sd 0:0:1:0: [sg0] tag#6593 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1034.215215][ C1] sd 0:0:1:0: [sg0] tag#6593 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1034.225087][ C1] sd 0:0:1:0: [sg0] tag#6593 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1034.234941][ C1] sd 0:0:1:0: [sg0] tag#6593 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1034.244798][ C1] sd 0:0:1:0: [sg0] tag#6593 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1034.254629][ C1] sd 0:0:1:0: [sg0] tag#6593 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1034.264464][ C1] sd 0:0:1:0: [sg0] tag#6593 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1034.274305][ C1] sd 0:0:1:0: [sg0] tag#6593 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1034.284129][ C1] sd 0:0:1:0: [sg0] tag#6593 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:35:31 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) sendto$inet(r0, &(0x7f0000000040)="17", 0xfeaa, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr=0x3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_START(r4, 0x4142, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) listen(r0, 0x8) accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x0) [ 1034.515024][ T7237] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 06:35:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) [ 1034.597657][ T7237] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 06:35:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0xfffffffe, 0x0, 0x0, 0x1, "00000000000000000000000000002000010008"}) write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) 06:35:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x3}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1e3003, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f00000001c0)=0x5, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f0000000140)) 06:35:32 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, 0x0, 0x100) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1035.113143][ T7254] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 06:35:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x3, 0x0, 0x70bd27, 0x0, [@sadb_x_nat_t_type={0x1, 0x14, 0xae}]}, 0x18}}, 0x0) [ 1035.239591][ T7254] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1035.336628][ C0] sd 0:0:1:0: [sg0] tag#6594 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1035.347297][ C0] sd 0:0:1:0: [sg0] tag#6594 CDB: Test Unit Ready [ 1035.354075][ C0] sd 0:0:1:0: [sg0] tag#6594 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1035.364007][ C0] sd 0:0:1:0: [sg0] tag#6594 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1035.374026][ C0] sd 0:0:1:0: [sg0] tag#6594 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1035.384063][ C0] sd 0:0:1:0: [sg0] tag#6594 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1035.394014][ C0] sd 0:0:1:0: [sg0] tag#6594 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1035.403976][ C0] sd 0:0:1:0: [sg0] tag#6594 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1035.413920][ C0] sd 0:0:1:0: [sg0] tag#6594 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1035.423806][ C0] sd 0:0:1:0: [sg0] tag#6594 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1035.433776][ C0] sd 0:0:1:0: [sg0] tag#6594 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1035.443655][ C0] sd 0:0:1:0: [sg0] tag#6594 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1035.453640][ C0] sd 0:0:1:0: [sg0] tag#6594 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1035.463588][ C0] sd 0:0:1:0: [sg0] tag#6594 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1035.473658][ C0] sd 0:0:1:0: [sg0] tag#6594 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1035.483670][ C0] sd 0:0:1:0: [sg0] tag#6594 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1035.493643][ C0] sd 0:0:1:0: [sg0] tag#6594 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:35:32 executing program 1: unshare(0x20400) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x12, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) dup2(r1, r0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000100)) [ 1035.746881][ T7270] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 06:35:32 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2001, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in6=@mcast1}]}, 0x38}}, 0x4000004) 06:35:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) r2 = socket$unix(0x1, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000000080)=0x28) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2, 0x0) open_tree(r3, &(0x7f0000000100)='./file0\x00', 0x0) exit(0x0) readv(r0, &(0x7f0000000140), 0x0) 06:35:33 executing program 1: mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x100010, 0xffffffffffffffff, 0xfffff000) r0 = socket$kcm(0x10, 0x8000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) r3 = syz_open_dev$mice(&(0x7f0000001640)='/dev/input/mice\x00', 0x0, 0x200) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f0000001680)={0x8, 'ip6_vti0\x00', {'vlan0\x00'}, 0x101}) write(r2, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000140)={@ipv4={[], [], @empty}, 0x30, r4}) r5 = dup(r1) ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f0000000180)="ce11d12e74ef4f3b5d2844c5f93e4dad75228b4c4f14be75bd7b1d7ac84d6733eb223c97f174747e135777efaee03bdcfecc8e44d66fcfb508a9e9b332a61b6deaa26f5af6002239b49513e34717b61d532f3334380f046a7d2ed0c855bedc2bf6d1c130841167f35becb56af077df45776077aec8e1f42c928424249c27eebd81e71ff6e70c4bf3a6d20f7c6f7bb583cb7b3ed3689b87eb053c418acd82d783e5e60f8095d93dd89641fed65bf2ce5a044b5933e49e") sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="40070000000401080000000000000000010000ffffffff40000400000a00020000007fff0000000008fffffeffffffffff000100020000000600064000040000"], 0x40}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r5, 0x80045006, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000005300)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/239, 0xef}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r6, 0x6, 0xc, 0x0, &(0x7f0000012ffc)) 06:35:33 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) ioctl$sock_netdev_private(r2, 0x89f5, &(0x7f0000000080)="bad2f460ebea885d30dfd57ade64e19b7f0c630b30aba6632ae08b633702ee8217c7cf3510ba298125d79559630908aa767f585b7c1486aff602b8aa6cf6ff247781f788187695d078e2c6ee502c5ca3cb275bf2c8faf1737ec6ac8d0fd4e31dba286480baa55fe32c9b0d15830ebaa21d8cb0dff8082aa980fd2a95bc66fb4c7679c111e50c395fb2b39b43f4677a6b3017668e05c981ffcb219dc024656304bc17cc842b52ba75145cf477a011461b368b388f") sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x6e6bbf, 0x886a, {0x6, 0xff, 0x20, 0x8, 0x0, 0x3ff, 0x0, @in6=@remote, @in6=@rand_addr="a77aabf4f671dcdf6627885bd6807248"}}]}, 0x50}}, 0x4) 06:35:33 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, 0x0, 0x100) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1036.379930][ T7289] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1036.440686][ T7291] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1036.484492][ C1] sd 0:0:1:0: [sg0] tag#6595 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1036.495336][ C1] sd 0:0:1:0: [sg0] tag#6595 CDB: Test Unit Ready [ 1036.502145][ C1] sd 0:0:1:0: [sg0] tag#6595 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1036.511897][ C1] sd 0:0:1:0: [sg0] tag#6595 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1036.521849][ C1] sd 0:0:1:0: [sg0] tag#6595 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1036.531787][ C1] sd 0:0:1:0: [sg0] tag#6595 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1036.541791][ C1] sd 0:0:1:0: [sg0] tag#6595 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1036.552119][ C1] sd 0:0:1:0: [sg0] tag#6595 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1036.561900][ C1] sd 0:0:1:0: [sg0] tag#6595 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1036.572048][ C1] sd 0:0:1:0: [sg0] tag#6595 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1036.581817][ C1] sd 0:0:1:0: [sg0] tag#6595 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1036.591738][ C1] sd 0:0:1:0: [sg0] tag#6595 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1036.601615][ C1] sd 0:0:1:0: [sg0] tag#6595 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1036.611493][ C1] sd 0:0:1:0: [sg0] tag#6595 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1036.621502][ C1] sd 0:0:1:0: [sg0] tag#6595 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1036.631561][ C1] sd 0:0:1:0: [sg0] tag#6595 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1036.641427][ C1] sd 0:0:1:0: [sg0] tag#6595 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:35:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000100)={0x2, 0x39, 0x11, 0x8, 0xb, 0x1, 0x3, 0x126, 0xffffffffffffffff}) sendmsg$IPSET_CMD_TEST(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0xb, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000800}, 0x40) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) 06:35:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r5, 0xc0105303, &(0x7f0000000040)={0x7f, 0x7, 0xc8}) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x4}], 0x1, 0x5) 06:35:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_GET_SPEED(r3, 0x551f) r4 = syz_open_pts(r0, 0x1) write(r4, &(0x7f0000000000)="d5", 0xfffffedf) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r6 = dup3(0xffffffffffffffff, r5, 0x80000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000040)={{0x0, 0x0, 0x1000, 0x2, 0x3}}) exit(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) [ 1037.178119][ T7306] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 06:35:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) read$usbmon(r6, &(0x7f0000000200)=""/239, 0xef) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a000007000000fcffffff0000000005001a0600141400000000000000000000000000ac1e000100000000000000000000000000000000b33129fd783ec4bf436ff64a8e0221622aecc4330ce4e9bda3c7942222c01bed76559d4e82866122e09d70a94ad1dd9394f81ba1b14f0516f72c5f0f3d699ef5d18c4e32d131eb35a62f029af5400cfd25e15a37"], 0x38}}, 0x0) r7 = socket(0x10, 0x8000d, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(0xffffffffffffffff, &(0x7f0000000380)="240000001a005f0214698700a99d579944b57bacf9f4070001000000281fcbdc56aa047ab19ca506c34b6ee7723aa7c2e14c0305f02842a10abbd77de71b61dcd41b46c9dd2325310275a69e0eb399585f1ad709e99e34cf5267c7c36ee9d48f6c1dcd8c44c73e646414c8187afedd4aff6190c0453c513ebd6ec9af1b2715a33d0b5d666fced14dfe592acef68ff97d7a09e8daee5ee60ecadf7f20aabdb7b55517d83ac21889655393900a81bff4790329210362b6b90e9a9700b0978426532968931e5164926dba4716a5b2e7e4da6ae37de2785bf4a1711f227076001ff77ac97b361413a06bd2991b288dd651c1ac1b238d528ccf5093dcdfa9972a51e5283ae4972e656e53c34a0da77de1c8161774c28ec564526200000233ded700000000000000", 0x125) getsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 06:35:34 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8}, 0x100) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1037.505076][ C1] sd 0:0:1:0: [sg0] tag#6596 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1037.516312][ C1] sd 0:0:1:0: [sg0] tag#6596 CDB: Test Unit Ready [ 1037.523075][ C1] sd 0:0:1:0: [sg0] tag#6596 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1037.532942][ C1] sd 0:0:1:0: [sg0] tag#6596 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1037.542796][ C1] sd 0:0:1:0: [sg0] tag#6596 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1037.552762][ C1] sd 0:0:1:0: [sg0] tag#6596 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1037.562613][ C1] sd 0:0:1:0: [sg0] tag#6596 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1037.572468][ C1] sd 0:0:1:0: [sg0] tag#6596 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1037.582315][ C1] sd 0:0:1:0: [sg0] tag#6596 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1037.592180][ C1] sd 0:0:1:0: [sg0] tag#6596 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1037.601948][ C1] sd 0:0:1:0: [sg0] tag#6596 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1037.611826][ C1] sd 0:0:1:0: [sg0] tag#6596 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1037.622595][ C1] sd 0:0:1:0: [sg0] tag#6596 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1037.632474][ C1] sd 0:0:1:0: [sg0] tag#6596 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1037.642335][ C1] sd 0:0:1:0: [sg0] tag#6596 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1037.652192][ C1] sd 0:0:1:0: [sg0] tag#6596 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1037.662168][ C1] sd 0:0:1:0: [sg0] tag#6596 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:35:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) fsync(r2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) 06:35:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r6, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r7) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r10, r10, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r11, 0x0) r12 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r13, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r6, r7, r10, r11, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r12, r13, 0x5}) r14 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001340)='/proc/self\x00', 0x10000, 0x0) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r16 = socket$rds(0x15, 0x5, 0x0) r17 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r17, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="84000000000201040000000000000000000000003c0002802c00018014000300c21c062a396c4533d15423b10aa8c37014000400fe8000000000000000000000000000aaf8aacc06050001000000e3d9b12f14f4f8aa018004000300fe880000000000000000000000000001140004000000000000000000000000000000000104000180"], 0x84}}, 0x0) r18 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r19 = socket$inet_udplite(0x2, 0x2, 0x88) r20 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000001440)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x80000) r21 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r21, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r22 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r22, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r23 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r23, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r24 = gettid() process_vm_writev(r24, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) r25 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280)='/dev/urandom\x00', 0x0, 0x0) r26 = fcntl$dupfd(r25, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r27, r27, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r28) r29 = socket$inet_tcp(0x2, 0x1, 0x0) r30 = fcntl$dupfd(r29, 0x0, r29) getsockopt$sock_cred(r30, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r31, r31, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r32, 0x0) r33 = clone3(&(0x7f0000001680)={0x4001100, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0}, 0x50) r34 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r34, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r34, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r27, r28, r31, r32, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r33, r34, 0x5}) r35 = socket$inet_tcp(0x2, 0x1, 0x0) r36 = fcntl$dupfd(r35, 0x0, r35) getsockopt$sock_cred(r36, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r37, r37, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r38) r39 = socket$inet_tcp(0x2, 0x1, 0x0) r40 = fcntl$dupfd(r39, 0x0, r39) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r41, r41, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r42, 0x0) r43 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r44 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r44, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r44, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r37, r38, r41, r42, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r43, r44, 0x5}) r45 = socket$inet_tcp(0x2, 0x1, 0x0) r46 = fcntl$dupfd(r45, 0x0, r45) getsockopt$sock_cred(r46, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r47, r47, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r48) r49 = socket$inet_tcp(0x2, 0x1, 0x0) r50 = fcntl$dupfd(r49, 0x0, r49) getsockopt$sock_cred(r50, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r51, r51, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r52, 0x0) r53 = clone3(&(0x7f0000001680)={0x80801200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r54 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r54, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r54, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r47, r48, r51, r52, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r53, r54, 0x5}) r55 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280)='/dev/urandom\x00', 0x0, 0x0) r56 = fcntl$dupfd(r55, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(r56, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r57, r57, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r58) r59 = socket$inet_tcp(0x2, 0x1, 0x0) r60 = fcntl$dupfd(r59, 0x0, r59) getsockopt$sock_cred(r60, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r61, r61, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r62, 0x0) r63 = clone3(&(0x7f0000001680)={0x4001100, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0}, 0x50) r64 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r64, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r64, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r57, r58, r61, r62, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r63, r64, 0x5}) getgroups(0x4, &(0x7f0000000180)=[0xffffffffffffffff, r48, 0x0, r58]) setresgid(0xee00, r38, r65) sendmsg$unix(r2, &(0x7f0000001580)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000001c0)="ccd73be669db3cf359e42c4571102b6fbb60fe9780c799fe1a29fcd111e77426b4f7295013b7da7ce90ef4e28dfaada45f95d54b35ca81695d98daaba79c14b87dc25b441fdfe4774f395e17a1209e5c8c432a815a7e01c71ff42ac1e114601a752c90e2b4c14699895f921188130db504c59abc75dd59df3176528f4fbe68fbd5a58ae0ec494dcdea6d2d36b19f4dc658f8967bf3318fcd7c593fad4dadace5127705dba7411bc88caa36c44dc1238505a793e22e53d0470c54841ff7c5805a1636e80b385df45ffaf0b2273db5fdc0cc567df841", 0xd5}, {&(0x7f0000000040)="4d3100b40d5fbb73f462e0f7e64bd71974c0fe32138091a700cf83800d57fffbaaca883874c6114916a92de50dc25d77d091ab104c5ba3a3c1fead", 0x3b}, {&(0x7f00000002c0)="c4fd968073d61501299730244a6dd3d1fd5b78533e6b3645279ae7206f54e9b377020bf3f142a2df8cfa8c59c7cf5d173e65feaae16b988cd40bfbd58961dc4aabf7d3a8f771739995a8d3ff3df4199693f86c776feab36f053209689cd46cafb0edef340330b6ce8bfa6432e094904847195ce89bea492cdabf5b938f6299", 0x7f}, {&(0x7f0000000340)="d199558abbf596e15ef7b210ecad100fccc12da789466ca93a255dd381d93bc3e84107afeef4c1550ffb5e704da6d8e9b5b7164189c5daeb2a7b569590790e860ccafe6cce9cb1cf631d178d84c0e7116a55295b1d49164dc2b9a160af8fd7730fa01dafea84e02e9aa6010a7a723564fa6d19e560dcb25eac296c796403b6c223d60e5cd2ab3589a1caa0fa3f3327b22d9a1ef3e07e6f7ae4d1a7eff1d4c299fe69cae75c89e4e2395cac341185beb81c8f94a9f4332f590206026bfd3832c154438a0d3b2361a1e237bcf33d183e04dcffed68819f085008d297bdbbb295ae21694880d12795ba2932b9b08c462b99fce316912b6373eb90397e165e11b2a4b2369342875de45881b6d8af427d014f9030b0f6aa5a52222489790d8fee752f03f7820ebbe961e1d5cb071195c872c5227b5390c2fbaac51baab8d34ea786095f074765fff1c0af91b45c43dedd47f8f33901b00c1b6309c8f9980abe138e646aaa027609c92f29c4c89448a2ca57641e46646b700d0ae5d52d89305d4bba41b97f8d11abe037c8959535a4d65963b0b3d6fd4b11d06c01e01ec2e25a1f6f74e32e4e2b539bf264dcc4c98d3bc8ed3659fc9bdd68ee31e5b2bdddba8c11816982a5c80870057d460230eb102e5bb003530053d769dec7239f901648720216d4854fd50369ab373974523f6a8eb90e0d0160d47fc6f9c27cda9987a3630349378cee26b971b85eff445808db2d9d77b14f94a22cce5c69e02e0a18b4f9ed75d4f787a124903f022622617d92a323e6e1a772e1367ec01b6a4a71a073c045b662f925ac095f4ef60ef8fc3e481b95c1e2f1faf29092d9b01c432017f5cdde34189249c4bda6a2fdc1017b0a85b8cf225a2597518cbd7573694e229b1621de8d40a526f55360326319e1339ed7d7363470f9cfc016d685cc6144ec2ac61ee4df707bb243cce7c3a0cf1ff7ac46a34231d9c90d896c7569e9b51d7d25781d123cfdd777ac8662481ccb8bb4c7572dc2757bd69c8b28e4226429706fa94f14e51ed4d9615c26839e6868ed408b567b99b4436fa343b581d9251b0b1c42313e51530c77cb483009abdbfbd887cd982922bb66c720981aeca011600547c406145f5ecbf4daa1dd4f30fd4c18eafd56cd38f251d3e4f022c398900bf9b91e394539d1084bf0f3b35d137a459d03222cb9ecdeb24510b7d76dd239864876129d5ace397319853c7aee763131d31bd05973cf2dc54943406e17f9c4214a7a8899732dff2651a8a60c761e574835563330de94a3afbbf9b7b74f0bf87fc39a06ec7e5e4093774035c00797355d16a02f09a465ddd2aa7d624fe74bcd68c9b7026b5a31a69b83cc839236a493ae7db1c5c74275765b433ce31d946c2ef1f915e525a3e7042ffb63ad36091cebfabfa5137fa87896d1abd7ad6ef6efa04887af22e575eb0e9871becf9651733d01dfd4aa7ef92c88ad0913a8b01e3a908db8b6415aa9aa8b3d0b8f2808206ae61490f057f261c562b2cb47b20abc17539ddd2e327059e30c77a1a9e759cefad2055e3923adf25346d2681f6fb9ac1f9054de24a6852f03236aa06cca2890cbd27edf5051403ad17f8807bcb10bd658565f3cebd0ca46e8a4244deb67d0ae1a1fe783c80d2cbc5a0fa79833de25cc9189a1bad5caf47694f69dd5670217064519f07b02e222813f40318e6ad1c799b7b3787e2d95fde7d87e701c6e3b09f2e40ccee4d33dba3b7c8ccc33d5594008a90ee2d019c8e7a5d0b51c823990444ff8850f2597ecbc5bd757fdfebb7a83bbd67d2fe6e96b326488e81284eea3943197bfbf4034f6c628a6c5d8a5fb2a44003a285a7f054cc890362a6024b5990af83b061c427f0e6f1c1f2662d996b80d2a859357833a406cd880993c14286e35a9258040dd6884ae0a0e277c1be45f6933f315dd22a06a62ff4560be9db1507864881b69dcacbccfa7ea69eb8b3886b7c9a12cd7c5a356669f999d7363a999013bd4a46f4a3a429d02393a78083d0d2a693e2619a0a10152658e625a978ce63c3846d726a4dd0183e154473cae8c3f70ea40cc61668e9f3cf0bbb359b7cbe4c03dcbe986944e8608cd149ec8b35cdd5302b70657496c6db0e83ba3de74dae1cf5f5ff24338034aa77c498071153af1df4f487749a92c836b1b9c6bcf3e347b811af03393cf16f30f97425b928fe73e8be0ffff8877429f51f8ce4249a5298e61e993e8a60c45cc8f3d07926e9c08d32e76262dff3127a5b157204e21c586cdc229167f52fc97bae9e46e524513c1966524496e08f0004efa9a19a6993aea7bb0dc70f5f5b2cc1f648e87f269d146616fb2f516d31f1d0665793228747ab440a721b0b6bdc81d96b82c024c68bb15b456188e71819d7caa9b800eb0db21f097dc253c448452c34ff3a5ab60cb7a0645935cc89bb64a4a62308704bfe7a878b5cf3bbcbeabb2b8ceda0e6f44bb1568d6ba18942b25726418cdf17139ebb31a2d8b6e229e891f57982a0af7e23b1153ffae61e900ad1802f8c13b72e655d91851f7256838f34b8c4f05ab5bcdfa3910fb1539ce69b1c16513dbe816b27701cbf03170eccde35cb4fddacd849a761efe6a970af776b8c0d52d7160f22414a72c4c2226fc3652961ee30189ae1d4ddd400a8898a745653c68c91e71cd80d633b656c7fce409ae3ce7c776a15ff14c94652e7bea05cb75fafe94b09ab9e8171f6b515aaab81158532d8c23849f95010b32c16b2cb50739f709896e38c63f6090294a5d7b99cf4fe9222bb5a9a78accc08059cacf3a196625bc264f39056afe7cca7eaa1c77317762071a0a1bf0f04a1f2f2f7e716794844f091f6e73abe3a765af69128fbd037560b4011a062be94228c14597ca943b3e2b20a9fdb86d5279c7f88f38f43810a58a1a86d91582af95e218883b37f1ca9e81ebc93fc05eb584c51dd039e02254fdff476de1f087de65d4de1ef2e876431750ca65e51570630f50ffcdcaf6fd3baebc0b7ca9bbe0643a4f980c9b6a9d46e07e1a89ff9df47e5c8159c12479cb3b157b30786160cd5f10bd724136c6fc6c81f0dc38bf44e3a8977623c6170fd3acd8bac78ed2b72d278420f299c781d7b8427ff9dee443d3c15a87d8f5eb81ab0804d1b1f36edc8a0b5221278f6fa7e9a1bf50381cc5ce5040c5b63b30363bc530cb324420b5d62c6f3b44dd39319f334b5195696d933d43656afe5fd6502e27255ca1e5c14b71c0149ebc190682a1003ea1f20a4f8129b7060b32bf9d6ad30e188d027b144fa91938cc7f0d8cec0090ee5befec4b0dded46a580d98e8c4f7f59d7c5750c6d8af041acbed9cd8e9ce0c48c76218155e522972918001698c158700636ee8f470dcf7ac746250ad2eb3f7aa53b1b5ccb81ba2363d53a08f3104a390926dcd20355a6aefb86c7d6efaf2e27dfc7a8f0b6178134460dbaea3b22394e0c935edb60644df59c695e0bad10f858c6dade739eec4dc42ceb16c15bfc4b72a4f6163fa679261209e9b92618d93c610446c9bd0653b5c613e0977ef8b53b197dea617aebd24c09cd52ae5b71b3c063a2bcac7f4bb6ebf438fa69537e4eab18c9f7e228cf233d245709dc0ca020535611c662b54fa11b020a5c80777811b705028c31ec0f929b483c78b8c8a6ca5ed743d4a29ca4e551317b496feb8a863320851620af766fece1e89873d165a2c8b7aed8576bf3a8493ac7f7b56ae67a6d282a87b63321c8a3c6b9b52c699332050c62c8318e6addd2f71746df288a267c39c346e388ee23bcb371956dcdbc623ce42127d360de19310efb4d63cb74f1d47e07c44e870fbe85678183ff9a18c2867ac30939bd3cc77a7eeaac663aab1ce4a3449792a90f4cf29169166be08805c0a98a869eb62975c11bda2f75cb6db58cedc8c74e4fc31329b6d1fb14baeb688c03288badfd7f3a1cd5813f8f0fdc7efe8dff5f25999ace8954363813f5db8bca2f40b985d06d0c5f42dcd4992ac4cae0d3932ce599a30851c0342cc58771f6bbd30a061dfe48f4969793a02bcc2c532d6b9a7826bdea17ac44f5c92d02f58dbaf839dbacf9d34aa63391de95e8d458151e81bd347c230fa9832689981d94f68e57374b3cbe55bd390479e5bef306c4139dec9a898678fc616fbf082f9de8933551e8c21b9456db6a52344b13ea0d3bcc14b9962430fbde6aedbdd50ae26855b660e43955947c3245be8f91aa886b61329ca1b19880bafc4231c51fb74925ea9789ee6fe46e2ac9606666a31f6ef0c23ed9c05768a20bd024bc9291f6657a9bed5cb561b8046754476fc48cd54fdd14a6889687671e51bd2fa93eef3b3c10c4d7b568ddc2b485e882b64f5d096fe2270e6f1556f92c49931e593c85faa1f3f12be52a6ce9ebed58de65b0cbabbe4cbd0039cd7b80f9d084fe63ea320bad7ffcc6c01836f76274c60bd53f5f2cab51909674e02c047c1d106efd3d6ddb461937be36e4e472741d3e11a3efb701103f5c0b90e379273c40e0f5758d32ae55cd659b67728f272e6bda3decb92ee3aa242bc3ba681961820443cd52faa82c898cd5f36aed110217d9350922d5634ff16cc57de0e8aa6c776d1ff8ff63abfb4dca606da564e34ff35e9df359889448316f92145ad0c1e8d281d77ce20bc460dbd13db65ff1a3c846bb4cdf200a066d7b574f19e520f3f8b7b2ecbbd8f3b426fe12638f7981d03493d5cc3c1a559519e658f5682c4cfb76d2018879fbccab4d8165b2d098f5a40d22921abef888a241585780def4bc78bcbcff171fb050c5868716c8b038c56b68f033ed5a7f937931d81c7e8ab62f3dd082310e2a421d5354f8371bbfd73e75fc71787c633bc1d698a000fa1b5163ca8e258c6efe45c0b53e7306fb2f05a6f1676020d7889925b8fedaa8fac135df993d0146082f23a5e621d927df13fd96151344ccaa775f319090f0d1a1f47528118d252782b82fbc7d70d4f7fb2cb52c2558c234962472d522af0201edfe5a3fee69b8ffcffda261a83220d494f40d2cec664fadfc39a13d1fbe7e17ad427ff625e4b415162a9cf514e8c5c11da00e2e769864f9f89b3b6aae4c825f44f0213b2a50ff90180df12a0cde4fc0e08f568c215991ab61eee0aeec1a3e53a48c90f06e460902c6d7518a7f07bbf444ed8456647d14014676d43d3605539bcd4156b02c89babd5396995edea5529cf423e383f1f2567ac3b469af16c3372f458ac52e3792460496c59fb1bc889c913cef45be4db67b7e6ad4bf116c637b301724fc7127eb47f52f3b62cb21567ec76fcae96cc70ba1d741ed6e82c2817379be5404199a8120652ba7b4cd1cd6aa388fe8d969aa85aa633926a7d6bd8db020f38c002e535199b33a1ba1a583787c67ad4570d9570cd5933dacb6c14542565c985f6c169e7e6a836b4f245959994b440b182f81084dcde92e390ff03516559b4efe98a89afdf584e2f80ee755ec06f2ccfa55047b2daf8d83718695624e4de1e53b501864f3eb791843eab50fc7eb6c1a048e44b8a50155d1e6e157f7fa6f0b0e2a0e885f2c3000bd1f7a88543417b72b46d326e4c05f86e97dec2e78b50e58051070ef0ac3f3def4cf7114eca838f9ffde70793b5a3450c38f5e420314e01d70219bce7afab5828e1b3574a7f38a33e04ffa67ea282f255faedeec0cf972ed4225ea274d593ca001940ab1d7cac89f2995927a061c099cd867698b55bce7a443d14ca3f7c01219618ef75d153084ab5009230195c382713bc3415a945e216738e3150a166852edb261429cf32e7a356095e58129d33b150aca80b4e", 0x1000}], 0x4, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r3, r6}}}, @rights={{0x28, 0x1, 0x1, [r14, r2, r1, r15, r16, r17]}}, @rights={{0x28, 0x1, 0x1, [r18, 0xffffffffffffffff, r19, r2, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r20]}}, @rights={{0x28, 0x1, 0x1, [r21, 0xffffffffffffffff, 0xffffffffffffffff, r0, r22, r23]}}, @cred={{0x1c, 0x1, 0x2, {r24, r31, r38}}}], 0xd0, 0x4000044}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r66 = socket$netlink(0x10, 0x3, 0x0) writev(r66, &(0x7f0000000080)=[{&(0x7f0000000000)="3900000013000900690f000000000000ab008000140000004600010707000014190001001000000800005068000000000000ef38bf461e59d7", 0x39}], 0x1) 06:35:35 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x450200, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080)=0x95, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x1) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) 06:35:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x1) prctl$PR_GET_KEEPCAPS(0x7) r1 = dup2(r0, r0) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000000380)={"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"}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f0000000040)=""/119) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000340)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0x22, {0x2, 0x0, @empty}, 'bond0\x00'}) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a000007000000000800000000000005001a00ac141400000000000000000000000000ac1e000100000000000000000000000000000000bfafeaede39cb2b01dc6044f088216ca4ab3e09e547343d72bd5dccd8c2ac3a7950ac7fd8470d51c"], 0x38}}, 0x0) 06:35:35 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000ffff0000000000009820000000003b086803ffff633b27e59aa14417000000006d17c3f2c876c69901000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680814966ff9f2d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee09aa272c56100c796d74c92fad7e34bd5f0e4542636c2cb6222bc224649282af53ba5f496b75b8a42657e0c0a675cc276304f3c1955e3e18f161d21d606f2ef2a7ec42902015d553235041a8a08a6d0470d519f61067d7e38717e69aa37681e5711a657e80950afb00e24f3f9567a61f77f817eaaa7af8e75e847a57fb014eb65fc813258f995a0505f1baa5d318fdaee68ff2be4f913f5cc8e883f0900000000000000c5a8a00e5085b900"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8}, 0x100) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1038.592597][ C0] sd 0:0:1:0: [sg0] tag#6598 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1038.603529][ C0] sd 0:0:1:0: [sg0] tag#6598 CDB: Test Unit Ready [ 1038.610171][ C0] sd 0:0:1:0: [sg0] tag#6598 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1038.620241][ C0] sd 0:0:1:0: [sg0] tag#6598 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1038.630150][ C0] sd 0:0:1:0: [sg0] tag#6598 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1038.640236][ C0] sd 0:0:1:0: [sg0] tag#6598 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1038.650120][ C0] sd 0:0:1:0: [sg0] tag#6598 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1038.660159][ C0] sd 0:0:1:0: [sg0] tag#6598 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1038.670038][ C0] sd 0:0:1:0: [sg0] tag#6598 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1038.679996][ C0] sd 0:0:1:0: [sg0] tag#6598 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1038.690029][ C0] sd 0:0:1:0: [sg0] tag#6598 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1038.699955][ C0] sd 0:0:1:0: [sg0] tag#6598 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1038.709922][ C0] sd 0:0:1:0: [sg0] tag#6598 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1038.719864][ C0] sd 0:0:1:0: [sg0] tag#6598 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1038.730472][ C0] sd 0:0:1:0: [sg0] tag#6598 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1038.740479][ C0] sd 0:0:1:0: [sg0] tag#6598 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1038.750378][ C0] sd 0:0:1:0: [sg0] tag#6598 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:35:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="020a000007000000000000000000000005001a00ac141400000000000000000000000000ac1e00010000000000000000008e210000000000"], 0x38}}, 0x0) [ 1038.946430][ T7324] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1039.004255][ T7339] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1039.049481][ T7339] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1039.078643][ T7324] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 06:35:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) write$vhost_msg(r1, &(0x7f0000000200)={0x1, {&(0x7f0000000000)=""/149, 0x95, &(0x7f00000000c0)=""/72, 0x3}}, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020a00000700000000857115d2e0c029ed099ee4bbccb9a70000000000000005001a00ad141400000000000000000000000000ac1e00010000000000000000000000006c000000741b290e94467fbd8d4fd836165fcfd72dd04b18578735202be201010000000000000caf1faafa53c0afa6daeac1609e3b823e49c56135747224c76dcf252ec500815e7a7f342ee4723ba484938a20eae76a2c009a186a7d0c4c8746efd941bb2c8d80a1514ee2"], 0x38}}, 0x0) 06:35:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect(r2, &(0x7f0000000040)=@generic={0x1, "ee4b4f86a622de7e68c9af0d4b5fe31c2bf6a29e3680c3fb6eb423e9a1ac45c66197a0288b125091c147af08f313d29b54d113e36a0355edc3c6beab0906442a9c1c2a430b3ec3b280d5dc3b82b9de8ddb1a070d98065dda6c20570523a1e777d810b0aeb016dd95becd072bb04a677810069518d7b58d38de9a0d7420e9"}, 0x80) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180)='NLBL_UNLBL\x00') write(r1, &(0x7f0000000000)="d5", 0xfffffedf) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001380)='/dev/vcsu\x00', 0x2, 0x0) ioctl$IMCTRLREQ(r3, 0x80044945, &(0x7f00000013c0)={0x4009, 0xfff, 0x9, 0x2}) exit(0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x40000, 0x0) sendto$inet6(r4, &(0x7f0000001200)="2ffa1c47fdab8eaa0d590a4f0991158a9d2b12ad46a27230a2317492eeb866fcb27fe8804d442fbed6106b745f5d56186eb2c0c54b98fd41057500a4c06b067170e161c9cd629d3d71c71801a5a16f0969cff452d1851bd374ff36478971349e33c070e2175db671df65190d20345917d78ac8fa653ce6967efb10d7c7df314d3ebe63225a20a62ea9516e84d8be39d6c03546daa7e9c5c813b54295a38f0aa1d9f762b900d651dd2fca73d1edac3a6c22678e102b7958c72d6c09f60a914e8dabd8b17af61f0b7ed220ef63925e6fd0e89df0bb427685d6c30f7b7e70c754ad7b48a16915755e33e1ed3ac871b2428de352af", 0xf3, 0x4000001, &(0x7f0000000100)={0xa, 0x4e20, 0x5f73, @dev={0xfe, 0x80, [], 0x10}, 0x80}, 0x1c) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) getsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f0000001300), &(0x7f0000001340)=0x4) 06:35:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x333180, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xe00000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0xec, 0x0, 0x1, 0x5, 0x0, 0x0, {0x5}, [@CTA_NAT_DST={0x40, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_NAT_DST={0x28, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr="b846a75d8fff496cb2a436de3f660856"}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x0, 0x400]}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9d37}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa069}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffffc}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_NAT_DST={0x34, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x400c5}, 0x4) 06:35:36 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000ffff0000000000009820000000003b086803ffff633b27e59aa14417000000006d17c3f2c876c69901000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680814966ff9f2d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee09aa272c56100c796d74c92fad7e34bd5f0e4542636c2cb6222bc224649282af53ba5f496b75b8a42657e0c0a675cc276304f3c1955e3e18f161d21d606f2ef2a7ec42902015d553235041a8a08a6d0470d519f61067d7e38717e69aa37681e5711a657e80950afb00e24f3f9567a61f77f817eaaa7af8e75e847a57fb014eb65fc813258f995a0505f1baa5d318fdaee68ff2be4f913f5cc8e883f0900000000000000c5a8a00e5085b900"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8}, 0x100) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1039.667881][ C1] sd 0:0:1:0: [sg0] tag#6599 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1039.678981][ C1] sd 0:0:1:0: [sg0] tag#6599 CDB: Test Unit Ready [ 1039.685865][ C1] sd 0:0:1:0: [sg0] tag#6599 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1039.696077][ C1] sd 0:0:1:0: [sg0] tag#6599 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1039.706004][ C1] sd 0:0:1:0: [sg0] tag#6599 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1039.716210][ C1] sd 0:0:1:0: [sg0] tag#6599 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1039.726297][ C1] sd 0:0:1:0: [sg0] tag#6599 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1039.736606][ C1] sd 0:0:1:0: [sg0] tag#6599 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1039.746815][ C1] sd 0:0:1:0: [sg0] tag#6599 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1039.757209][ C1] sd 0:0:1:0: [sg0] tag#6599 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1039.767180][ C1] sd 0:0:1:0: [sg0] tag#6599 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1039.777408][ C1] sd 0:0:1:0: [sg0] tag#6599 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1039.788062][ C1] sd 0:0:1:0: [sg0] tag#6599 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1039.799096][ C1] sd 0:0:1:0: [sg0] tag#6599 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1039.810655][ C1] sd 0:0:1:0: [sg0] tag#6599 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1039.820816][ C1] sd 0:0:1:0: [sg0] tag#6599 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1039.830898][ C1] sd 0:0:1:0: [sg0] tag#6599 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:35:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) times(&(0x7f0000000040)) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r2, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000080)={0x7, [0x1000, 0x20, 0x1, 0x8, 0x7c9, 0x4, 0x7]}, &(0x7f00000000c0)=0x12) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0xffffffff, 0x8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in6=@dev={0xfe, 0x80, [], 0x31}}]}, 0x38}}, 0x0) 06:35:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="020a00000700000000e0ffff13978abe6dde09d2f81400000000000000000000000000ac1e00010000000000000000000000000000de00"], 0x38}}, 0x0) 06:35:37 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x2000000, 0x0, 0x7fff}) r1 = syz_open_pts(r0, 0x101001) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) [ 1041.370142][ T7395] __nla_validate_parse: 2 callbacks suppressed [ 1041.370173][ T7395] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1041.410971][ T7399] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1041.443616][ T7396] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1041.485421][ T7395] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1041.532386][ T7395] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1041.564489][ T7386] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 06:35:39 executing program 1: sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000e40)=ANY=[@ANYBLOB="01", @ANYRES16=0x0, @ANYBLOB], 0x3}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x96f60ba188302d1f, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x2}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0xc000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x620400, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() sendmmsg$unix(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)='|', 0x1}], 0x1, &(0x7f0000000140)}], 0x1, 0x0) 06:35:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000002640)={@remote, @multicast2, 0x0}, &(0x7f0000002680)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000026c0)={@rand_addr, @empty, 0x0}, &(0x7f0000002700)=0xc) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000002800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002740)={0x4c, r2, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xe919, 0x2}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008040}, 0x10) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r5 = syz_open_pts(r0, 0x1) write(r5, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000001280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, r8, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_WAKE(r9, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) 06:35:39 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x3e8}, 0x100) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') 06:35:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="020a000007000000000000000000000005001a0018ff1400000000ac1e000100"/47], 0x38}}, 0x0) [ 1042.649283][ C0] sd 0:0:1:0: [sg0] tag#6600 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1042.660414][ C0] sd 0:0:1:0: [sg0] tag#6600 CDB: Test Unit Ready [ 1042.667244][ C0] sd 0:0:1:0: [sg0] tag#6600 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1042.677746][ C0] sd 0:0:1:0: [sg0] tag#6600 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1042.687683][ C0] sd 0:0:1:0: [sg0] tag#6600 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1042.697958][ C0] sd 0:0:1:0: [sg0] tag#6600 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1042.708118][ C0] sd 0:0:1:0: [sg0] tag#6600 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1042.718252][ C0] sd 0:0:1:0: [sg0] tag#6600 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1042.728613][ C0] sd 0:0:1:0: [sg0] tag#6600 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1042.739116][ C0] sd 0:0:1:0: [sg0] tag#6600 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1042.749328][ C0] sd 0:0:1:0: [sg0] tag#6600 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1042.759877][ C0] sd 0:0:1:0: [sg0] tag#6600 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1042.770124][ C0] sd 0:0:1:0: [sg0] tag#6600 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1042.780418][ C0] sd 0:0:1:0: [sg0] tag#6600 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1042.790647][ C0] sd 0:0:1:0: [sg0] tag#6600 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1042.800853][ C0] sd 0:0:1:0: [sg0] tag#6600 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1042.811129][ C0] sd 0:0:1:0: [sg0] tag#6600 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:35:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x80, 0x0, 0x7, 0x0, 0x0, 0x8, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in6=@mcast2}]}, 0x38}}, 0x0) 06:35:40 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="020b0001020000000000429f8f845e6a83b44a40000000008dbcd6b327150164fbf4572c1d46db972daf2a1c6b2005dba4f3d47610c741223c2f94153390a6932acb762cdddbf209f100324c86b4147791721e575100ccde9fe46a27a139d7f790c7a5d00e2fda50752d5394724d4171000605459e8f0ace70c5f33f0fa28db95a7beb8083c0b8ad8a4ce2197144204be15dfff7ec45f282622c04c478026b269959c57cb5523c44f44c08b15d31dd86e6b85c53efb84510c827c26f2109fcd15aab7bbd7c69287cd4696eb6d96db537febc07a6a23457b3a8070fe6230802aaa2bff8f4b0e8f4d7effdc949f783b593b077e4cc10a3aa503f1b1970be626c4e06b88bb6ee564070a208e32c4e7433761ec8c808a1f4164b9982d38a60cd00"/299], 0x12b}}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040)=0x100, 0x30a) recvmmsg(r0, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) 06:35:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000000000), 0x1, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) 06:35:40 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x3e8}, 0x100) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') 06:35:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) pipe(&(0x7f0000000040)) exit(0x0) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000001200)=""/4096, 0x1000) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) [ 1043.780581][ C1] sd 0:0:1:0: [sg0] tag#6601 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1043.791939][ C1] sd 0:0:1:0: [sg0] tag#6601 CDB: Test Unit Ready [ 1043.798981][ C1] sd 0:0:1:0: [sg0] tag#6601 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1043.809144][ C1] sd 0:0:1:0: [sg0] tag#6601 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1043.819116][ C1] sd 0:0:1:0: [sg0] tag#6601 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1043.829406][ C1] sd 0:0:1:0: [sg0] tag#6601 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1043.839760][ C1] sd 0:0:1:0: [sg0] tag#6601 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1043.849870][ C1] sd 0:0:1:0: [sg0] tag#6601 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1043.860254][ C1] sd 0:0:1:0: [sg0] tag#6601 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1043.870719][ C1] sd 0:0:1:0: [sg0] tag#6601 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1043.880923][ C1] sd 0:0:1:0: [sg0] tag#6601 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1043.891295][ C1] sd 0:0:1:0: [sg0] tag#6601 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1043.901645][ C1] sd 0:0:1:0: [sg0] tag#6601 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1043.911856][ C1] sd 0:0:1:0: [sg0] tag#6601 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1043.921759][ C1] sd 0:0:1:0: [sg0] tag#6601 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1043.932299][ C1] sd 0:0:1:0: [sg0] tag#6601 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1043.942648][ C1] sd 0:0:1:0: [sg0] tag#6601 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:35:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) 06:35:41 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000ffff0000000000009820000000003b086803ffff633b27e59aa14417000000006d17c3f2c876c69901000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680814966ff9f2d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee09aa272c56100c796d74c92fad7e34bd5f0e4542636c2cb6222bc224649282af53ba5f496b75b8a42657e0c0a675cc276304f3c1955e3e18f161d21d606f2ef2a7ec42902015d553235041a8a08a6d0470d519f61067d7e38717e69aa37681e5711a657e80950afb00e24f3f9567a61f77f817eaaa7af8e75e847a57fb014eb65fc813258f995a0505f1baa5d318fdaee68ff2be4f913f5cc8e883f0900000000000000c5a8a00e5085b900"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x3e8}, 0x100) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1044.478053][ C0] sd 0:0:1:0: [sg0] tag#6602 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1044.489644][ C0] sd 0:0:1:0: [sg0] tag#6602 CDB: Test Unit Ready [ 1044.497173][ C0] sd 0:0:1:0: [sg0] tag#6602 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.513758][ C0] sd 0:0:1:0: [sg0] tag#6602 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.527296][ C0] sd 0:0:1:0: [sg0] tag#6602 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.540665][ C0] sd 0:0:1:0: [sg0] tag#6602 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.556151][ C0] sd 0:0:1:0: [sg0] tag#6602 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.572252][ C0] sd 0:0:1:0: [sg0] tag#6602 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.587585][ C0] sd 0:0:1:0: [sg0] tag#6602 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.602127][ C0] sd 0:0:1:0: [sg0] tag#6602 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.615105][ C0] sd 0:0:1:0: [sg0] tag#6602 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.626172][ C0] sd 0:0:1:0: [sg0] tag#6602 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.639423][ C0] sd 0:0:1:0: [sg0] tag#6602 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.649715][ C0] sd 0:0:1:0: [sg0] tag#6602 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.660201][ C0] sd 0:0:1:0: [sg0] tag#6602 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.670510][ C0] sd 0:0:1:0: [sg0] tag#6602 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.680981][ C0] sd 0:0:1:0: [sg0] tag#6602 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:35:41 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x3e8}, 0x100) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1044.870518][ C0] sd 0:0:1:0: [sg0] tag#6603 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1044.881849][ C0] sd 0:0:1:0: [sg0] tag#6603 CDB: Test Unit Ready [ 1044.890804][ C0] sd 0:0:1:0: [sg0] tag#6603 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.901107][ C0] sd 0:0:1:0: [sg0] tag#6603 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.911328][ C0] sd 0:0:1:0: [sg0] tag#6603 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.922429][ C0] sd 0:0:1:0: [sg0] tag#6603 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.933309][ C0] sd 0:0:1:0: [sg0] tag#6603 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.944013][ C0] sd 0:0:1:0: [sg0] tag#6603 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.953965][ C0] sd 0:0:1:0: [sg0] tag#6603 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06:35:42 executing program 4: ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000001280)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001240)='NLBL_UNLBL\x00') r8 = syz_open_pts(r7, 0x42003) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000040)={0x2, 0x70, "6ed4f672778b80cea07bd2ef4aa355bb857b557a232fba6f786289601ed2d62d0d70789dbfad87707c431d33aadae92f1ff30cc0dc481439b32c0d31920cf6c03cf95a5a7306be4c9b383c5359ca21baa3b4f50f3913be5891f70d30b90ecbdb88cde3567ab7878f7c72e44f5471624b"}) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000000c0)=""/106) write(r8, &(0x7f0000000000)="d5", 0xfffffedf) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r9, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) getsockopt$inet6_buf(r9, 0x29, 0x1c, &(0x7f0000000180)=""/42, &(0x7f0000001200)=0x2a) exit(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) [ 1044.965232][ C0] sd 0:0:1:0: [sg0] tag#6603 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.975891][ C0] sd 0:0:1:0: [sg0] tag#6603 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.986697][ C0] sd 0:0:1:0: [sg0] tag#6603 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.997410][ C0] sd 0:0:1:0: [sg0] tag#6603 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1045.009252][ C0] sd 0:0:1:0: [sg0] tag#6603 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1045.019501][ C0] sd 0:0:1:0: [sg0] tag#6603 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1045.029675][ C0] sd 0:0:1:0: [sg0] tag#6603 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1045.039955][ C0] sd 0:0:1:0: [sg0] tag#6603 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:35:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r4, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) r6 = socket$inet(0xa, 0x801, 0x84) sendmsg$inet(r6, &(0x7f00000026c0)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x81e}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000002c0)="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", 0x1c5}], 0x1}, 0x0) listen(r6, 0x3) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000480)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000780)={r9, 0x70, "2f00e812e554d8fdb595f40ac122b26a09e2261c8b16033625fa0c9be4be7fbfcedb2f1066f5b7ed3dce5e4175bc78985a34e1444b8f73a669e77ce516fb931540e3786b57befd8a77958168ac1e6b61f22e34b37391b83f72df04e1a3c441eed5cfe3fb5ea1bc321b1c62bdc7a596d3"}, &(0x7f0000000140)=0x78) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000200)={r9, 0x4, 0x7, 0x6, 0x20, 0xb3b9, 0x0, 0x7, {0x0, @in6={{0xa, 0x4e22, 0x4, @rand_addr="f2173c3ed4230ea5935cc725a4554ad9", 0x6}}, 0x400, 0x1, 0x8, 0x3, 0x1ff}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000002c0)={r10, 0xffffffff, 0x20}, &(0x7f0000000300)=0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) fcntl$dupfd(r3, 0x0, r11) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000000)={0x80, 0x5}) [ 1045.282590][ T7468] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1045.359166][ T7468] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1045.457020][ T7471] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. 06:35:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x58, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x58}}, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e21, @remote}}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x2c4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@ccm_128={{0x303}, "6464f9823fc2d635", "6c2ccd0aa0f032b9407121ddd1ba22fc", "fa904709", "9acec2eb8e96e366"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0)='6', 0x1, 0x0, 0x0, 0x0) [ 1045.531115][ T7468] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. 06:35:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) 06:35:42 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0x3e8}, 0x100) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1046.039887][ C0] sd 0:0:1:0: [sg0] tag#6604 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1046.051436][ C0] sd 0:0:1:0: [sg0] tag#6604 CDB: Test Unit Ready [ 1046.058304][ C0] sd 0:0:1:0: [sg0] tag#6604 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1046.068200][ C0] sd 0:0:1:0: [sg0] tag#6604 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1046.078278][ C0] sd 0:0:1:0: [sg0] tag#6604 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1046.088216][ C0] sd 0:0:1:0: [sg0] tag#6604 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1046.098210][ C0] sd 0:0:1:0: [sg0] tag#6604 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1046.108117][ C0] sd 0:0:1:0: [sg0] tag#6604 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1046.118084][ C0] sd 0:0:1:0: [sg0] tag#6604 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1046.127964][ C0] sd 0:0:1:0: [sg0] tag#6604 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1046.137995][ C0] sd 0:0:1:0: [sg0] tag#6604 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1046.147971][ C0] sd 0:0:1:0: [sg0] tag#6604 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1046.158050][ C0] sd 0:0:1:0: [sg0] tag#6604 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1046.167990][ C0] sd 0:0:1:0: [sg0] tag#6604 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1046.178054][ C0] sd 0:0:1:0: [sg0] tag#6604 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1046.187972][ C0] sd 0:0:1:0: [sg0] tag#6604 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1046.197909][ C0] sd 0:0:1:0: [sg0] tag#6604 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:35:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4}]}, 0x38}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r3, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) accept$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) [ 1046.375578][ T7475] __nla_validate_parse: 3 callbacks suppressed [ 1046.375608][ T7475] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 06:35:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x4241, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$snddsp(r4, &(0x7f0000000040)="b663aaab2c51a0ae3fbccc0694f856d97b6b3f4eca4b56077b570f6700ae136c55db0e86a3e6d3f76ec2d5d8f725ba0d02eaa0fc2ba17c705475cfaf951dee60c92b3da77b7916eb66a4db2547c33a7ca603c637e44c429f511687733cd09ac3b034c8f03d0bb0442560d96eadf93d76162b9697b88ae0ed7a98", 0x7a) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x2, 0x2010, r5, 0x83000000) exit(0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TCSBRK(r8, 0x5409, 0x4) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r12 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r12, r11, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r13) 06:35:43 executing program 1: r0 = timerfd_create(0x5, 0x0) fcntl$getownex(r0, 0x10, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000200)={0x6, "30beac2b6592ecbd598b6f26bb5f0991ead22b61733c2f0d2a2b4a9615608b5e", 0x3, 0x40, 0x9, 0x5, 0x10, 0x0, 0x0, 0x101}) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="5300000044a6aeabec2e152000ebb0007b32000000000000109d5a20aa17db9820000000003b08d403f7ff713b27e59aa144175dd106730317c3f2c876c69995ed6bf30000000025da3f0fc7ec6e2656000008004902a181baf9451cd873e9827045631b97a1f61352484be80941ffa307220b345fcb43f59b94d46c8b812b1c8813ef3aec1f5e7fe8dcdc08f2698880e385d4104ab9b66660c55bef5ea0f38f1bed5b8861d80ede23e808fed9218ad1150d4fd71ab63d5ee4502aaa522c2a93101bc72e3eaf8a880741bea70000000000000000000000003c55c97328a0684a6dbf0c14"], 0x58) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000004c0)='team\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b7059b342623b372d82fefa01f9a2d830f7f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3141", 0x3b7}], 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x82022, 0x2) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) write$FUSE_LK(r4, &(0x7f0000000280)={0x28, 0x0, 0x6, {{0x7, 0x100000001, 0x1, r5}}}, 0x28) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f00000000c0)=0x8) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000080)='.\x00', 0xfe) 06:35:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/101) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_PLL_SET(r5, 0x40207012, &(0x7f0000000000)={0x0, 0x6, 0x2, 0x7f, 0x6, 0x7, 0x40}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x1000, "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"}, &(0x7f0000000100)=0x1008) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0xf5f, 0x0, 0x0, 0x949, 0x1, 0x4, 0x1ff, 0x3, r7}, 0x20) 06:35:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, &(0x7f0000000040)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x24) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f00000000c0)={0x26ea, 0x0, &(0x7f0000014000/0x2000)=nil}) r6 = syz_open_pts(r0, 0x0) ioctl$KDGKBSENT(r6, 0x4b48, &(0x7f0000001200)={0x9, "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"}) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) 06:35:44 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0x3e8}, 0x100) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1047.154848][ C0] sd 0:0:1:0: [sg0] tag#6605 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1047.165545][ C0] sd 0:0:1:0: [sg0] tag#6605 CDB: Test Unit Ready [ 1047.172583][ C0] sd 0:0:1:0: [sg0] tag#6605 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1047.182565][ C0] sd 0:0:1:0: [sg0] tag#6605 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1047.192596][ C0] sd 0:0:1:0: [sg0] tag#6605 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1047.202564][ C0] sd 0:0:1:0: [sg0] tag#6605 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1047.212518][ C0] sd 0:0:1:0: [sg0] tag#6605 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1047.222551][ C0] sd 0:0:1:0: [sg0] tag#6605 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1047.232453][ C0] sd 0:0:1:0: [sg0] tag#6605 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1047.242346][ C0] sd 0:0:1:0: [sg0] tag#6605 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1047.252253][ C0] sd 0:0:1:0: [sg0] tag#6605 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1047.262245][ C0] sd 0:0:1:0: [sg0] tag#6605 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1047.272159][ C0] sd 0:0:1:0: [sg0] tag#6605 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1047.281959][ C0] sd 0:0:1:0: [sg0] tag#6605 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1047.291856][ C0] sd 0:0:1:0: [sg0] tag#6605 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1047.301765][ C0] sd 0:0:1:0: [sg0] tag#6605 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1047.311671][ C0] sd 0:0:1:0: [sg0] tag#6605 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:35:44 executing program 3: r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @host}, 0x10, 0x800) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) 06:35:44 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x283) socket$inet6(0xa, 0x0, 0x0) dup(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x14) socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002700)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003d0000001000100002006e657464657673696d30000008000300000000000800040000000000"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0) 06:35:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$key(0xf, 0x3, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in6=@remote}]}, 0x38}}, 0x0) 06:35:45 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0x3e8}, 0x100) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') 06:35:45 executing program 3: ioctl$SNDRV_PCM_IOCTL_INFO(0xffffffffffffffff, 0x81204101, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) [ 1048.241823][ C0] sd 0:0:1:0: [sg0] tag#6606 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1048.252504][ C0] sd 0:0:1:0: [sg0] tag#6606 CDB: Test Unit Ready [ 1048.259239][ C0] sd 0:0:1:0: [sg0] tag#6606 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1048.269203][ C0] sd 0:0:1:0: [sg0] tag#6606 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1048.279112][ C0] sd 0:0:1:0: [sg0] tag#6606 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1048.289069][ C0] sd 0:0:1:0: [sg0] tag#6606 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1048.299419][ C0] sd 0:0:1:0: [sg0] tag#6606 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1048.309302][ C0] sd 0:0:1:0: [sg0] tag#6606 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1048.319479][ C0] sd 0:0:1:0: [sg0] tag#6606 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1048.329390][ C0] sd 0:0:1:0: [sg0] tag#6606 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1048.339305][ C0] sd 0:0:1:0: [sg0] tag#6606 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1048.349263][ C0] sd 0:0:1:0: [sg0] tag#6606 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1048.359161][ C0] sd 0:0:1:0: [sg0] tag#6606 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1048.369052][ C0] sd 0:0:1:0: [sg0] tag#6606 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1048.382176][ C0] sd 0:0:1:0: [sg0] tag#6606 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1048.392177][ C0] sd 0:0:1:0: [sg0] tag#6606 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1048.401949][ C0] sd 0:0:1:0: [sg0] tag#6606 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:35:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)={0x0, 0xffffffff}) r4 = syz_open_pts(r0, 0x1) write(r4, &(0x7f0000000040)="d5", 0x1) exit(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) 06:35:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCEXCL(r1, 0x540c) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="84000000000201040000000000000000000000003c0002802c00018014000300c202002a396c4533d15423b10aa8c37014000400fe8000000000000000000000000000aa0c0002800500010000000000300003802c00018004000300fe880000000000000000000000000001140004000000000000000000000000000000000104000180"], 0x84}}, 0x0) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000000)={0x4, 0x5, 0x4, 0x2000, 0x37, {}, {0x2, 0x1, 0x4, 0x1, 0x4, 0x0, "c3d8dcb3"}, 0x9, 0x4, @userptr=0x80000001, 0x7ff, 0x0, 0xffffffffffffffff}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_PIT2(r8, 0x8070ae9f, &(0x7f0000000200)) write$P9_RSTATFS(r6, &(0x7f0000000080)={0x43, 0x9, 0x1, {0x0, 0x101, 0x80000000, 0x8000, 0x1581, 0x401, 0x2, 0x5, 0x400}}, 0x43) 06:35:45 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84000000000201040000000000000000000000003c0002802c00018016000300c21c062a396c4533d15423b10aa8c37014000400fe8000000000000000000000000000aa0c00028406a0010000000000300003802c00018004000305fe88000000000400000000000000000000000000000000013aa301808f76adaef01f37568f00"/141], 0x84}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='macvlan0\x00', 0xffffffffffffffdf) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local, @broadcast}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_getres(0x0, &(0x7f0000000100)) setsockopt$inet_mreqn(r0, 0x0, 0x6, 0x0, 0x0) [ 1048.906704][ T7572] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 06:35:46 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') 06:35:46 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84000000000201040000000000000000000000003c0002802c00018016000300c21c062a396c4533d15423b10aa8c37014000400fe8000000000000000000000000000aa0c00028406a0010000000000300003802c00018004000305fe88000000000400000000000000000000000000000000013aa301808f76adaef01f37568f00"/141], 0x84}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='macvlan0\x00', 0xffffffffffffffdf) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local, @broadcast}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_getres(0x0, &(0x7f0000000100)) setsockopt$inet_mreqn(r0, 0x0, 0x6, 0x0, 0x0) [ 1049.328878][ C0] sd 0:0:1:0: [sg0] tag#6607 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1049.339814][ C0] sd 0:0:1:0: [sg0] tag#6607 CDB: Test Unit Ready [ 1049.346616][ C0] sd 0:0:1:0: [sg0] tag#6607 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1049.356597][ C0] sd 0:0:1:0: [sg0] tag#6607 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1049.366494][ C0] sd 0:0:1:0: [sg0] tag#6607 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1049.376455][ C0] sd 0:0:1:0: [sg0] tag#6607 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1049.386398][ C0] sd 0:0:1:0: [sg0] tag#6607 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1049.396298][ C0] sd 0:0:1:0: [sg0] tag#6607 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1049.406285][ C0] sd 0:0:1:0: [sg0] tag#6607 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1049.416279][ C0] sd 0:0:1:0: [sg0] tag#6607 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1049.426163][ C0] sd 0:0:1:0: [sg0] tag#6607 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1049.436063][ C0] sd 0:0:1:0: [sg0] tag#6607 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1049.445057][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1049.445925][ C0] sd 0:0:1:0: [sg0] tag#6607 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1049.464929][ C0] sd 0:0:1:0: [sg0] tag#6607 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1049.475054][ C0] sd 0:0:1:0: [sg0] tag#6607 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1049.485040][ C0] sd 0:0:1:0: [sg0] tag#6607 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1049.495192][ C0] sd 0:0:1:0: [sg0] tag#6607 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:35:46 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyprintk\x00', 0x105000, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000300)={0xfffc, 0x7f, 0xfff}) geteuid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00', &(0x7f0000001380)=""/4096, 0x1000) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2}, 0x10) write(r3, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f00000000c0)={'veth1_to_team\x00', 0x7}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = socket$key(0xf, 0x3, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r8, 0xc0405665, &(0x7f0000000100)={0x2a, 0x2, 0x6, 0x8, 0x1, 0x4, 0xe}) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="020a7302d70b36233e3500000000000005001a00ac141400000000000000000000000000ac1e000100000000000000000000000008000000"], 0x38}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="84000000000201040000000000000000000000003c0002802c00018014000300c21c062a396c4533d15423b10aa8c37014000400fe8000000000000000000000aa0c0002800500010000000000300003802c00018004000300fe8800000000000000000000000000a9140004000000000000000000000000000000000104000180000000"], 0x84}}, 0x0) fsetxattr$security_ima(r9, &(0x7f0000000280)='security.ima\x00', &(0x7f00000002c0)=@ng={0x4, 0x4, 'f'}, 0x3, 0x6) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r11, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r11, 0xae44, 0x8) 06:35:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) 06:35:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x0, @link_local}}]}]}]}, 0x58}}, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f00000000c0)={r3, 0x2}) [ 1049.805407][ T7595] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1049.978604][ T7596] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 06:35:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x30, 0xffffffffffffffff, 0x3025a000) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1) 06:35:47 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1050.391759][ C0] sd 0:0:1:0: [sg0] tag#6608 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1050.402580][ C0] sd 0:0:1:0: [sg0] tag#6608 CDB: Test Unit Ready [ 1050.409240][ C0] sd 0:0:1:0: [sg0] tag#6608 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1050.419201][ C0] sd 0:0:1:0: [sg0] tag#6608 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1050.429330][ C0] sd 0:0:1:0: [sg0] tag#6608 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1050.439320][ C0] sd 0:0:1:0: [sg0] tag#6608 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1050.449222][ C0] sd 0:0:1:0: [sg0] tag#6608 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1050.459307][ C0] sd 0:0:1:0: [sg0] tag#6608 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1050.469212][ C0] sd 0:0:1:0: [sg0] tag#6608 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1050.479098][ C0] sd 0:0:1:0: [sg0] tag#6608 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1050.489092][ C0] sd 0:0:1:0: [sg0] tag#6608 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1050.498999][ C0] sd 0:0:1:0: [sg0] tag#6608 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1050.508895][ C0] sd 0:0:1:0: [sg0] tag#6608 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1050.518806][ C0] sd 0:0:1:0: [sg0] tag#6608 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1050.528693][ C0] sd 0:0:1:0: [sg0] tag#6608 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1050.538713][ C0] sd 0:0:1:0: [sg0] tag#6608 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1050.548708][ C0] sd 0:0:1:0: [sg0] tag#6608 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:35:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept4(r3, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80, 0x80000) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) 06:35:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000040)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) 06:35:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000600e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000005c0)=""/233) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000080)=0x4) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f00000000c0)) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r10, r10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) r13 = fcntl$dupfd(r12, 0x0, r12) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r14, r14, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r15, 0x0) r16 = clone3(&(0x7f0000001680)={0x80801200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r17 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r17, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r17, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r10, r11, r14, r15, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r16, r17, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0}, &(0x7f0000000700)=0xc) sendmsg$nl_generic(r7, &(0x7f0000000e00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000740)={0x668, 0x33, 0x1, 0x70bd25, 0x25dfdbfe, {0xe}, [@typed={0x34, 0x29, 0x0, 0x0, @binary="cac0f37d098f4a216ecb16fd727e21c4af5c04b597d1dce90c7fb45f5f38454c24fda94b6b6bcdc3fb16f7e921ee9aaa"}, @typed={0x8, 0x7c, 0x0, 0x0, @ipv4=@remote}, @generic="cd821cca10d09ada5056b19e5938fa1c0fdf4597c4386ba9186ac887bd4f1bbe06881281755dab27c6cd08a15ba1cabd9a46c479c6a67c73c2554a40d6c01a1f407bec15f1b8d304d913aaf73ae1942818e26a27acb133dbf98e0d", @generic="d4f577472cc790d8082fa944a32d4bdbdd9a25dcd0c9bb8d2221c14375f016e12b204ad7a6a98844daa6e534b7812baf25f443396155004828314897f250b9875a3a710d6c15643682a5224bc3bc93f4593818dd5494386a3b2c6f44e1c0033d970f6aaa5e502c88ff263ce31c76bf62cbef1d57e8cd4c566b33d8c6834a40f76f1ea1118d974ad68d6fa748d58ef3d712fc36bd8e6bcc289de7d229c91c238a18ba4c55c609bceb5ae6317a83a914cac12be73cf25ce33a32fa8f70ffbda47e461c740093f8f6419f442dc580d501bea12498e5", @nested={0x2a3, 0x43, 0x0, 0x1, [@generic="f5acaabe96d35e15908d7b", @generic="41d6d4a74956c35866a686896d4155abb6d3f338572a568032deb2ea864f3ffe9d3b88dc214d7e855d81b000818ed066df830393d14e332ff11c9acb7dbb585156afc8141d1812fc9a6c624c33e4f2403ad22bc046e72a40eefdfc16f646253f0a3a94c524b192dfeb91b8bcdcd3bf6bf8f34d6ff3ea2adfab2948cb378a2994f899865fd50f923cd6d058afe4669ac262b19695d5f5b14730c33377254ca6f5f6f35bcd8c722228dfdd6face08c746b8b85b5ce465851d110cf61ae3c8dc22f844994badb38391912526caa4e690848cbba325d6128f938a478b135af19a934deee51e99f78", @generic="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", @generic="fcfb75a689c7d6ef7be93376051a49465201047be5a740cb1ed175308d63a373b0a94480530cbd308a9050a05cba661ac4b0ad33ac4e94f0b64f82f34ceb2c19bd14ca61ec59e6ba2912813e2eda2c5e1d7c3b66778f97ea32288e38a8f097c26aa68aa681fe99f6d2f13b", @generic="bc82d3e2f3f323174e6678e535c92e53bd5c37849bdcbf2fed4c55947cc3784de4ed66916c61c8b857", @typed={0x4, 0x3}, @typed={0x8, 0x2e, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x8f, 0x0, 0x0, @uid=r14}, @typed={0x8, 0x66, 0x0, 0x0, @u32=0x2}]}, @nested={0x1e5, 0x2c, 0x0, 0x1, [@typed={0x8, 0x88, 0x0, 0x0, @uid=r18}, @generic="72e245601be6b4cd162aa30ed70b4efa2e389c270f2a83fdc046711c64167dbe0236799caf044b8bd7e9c093dffd66d63f595b6a09a1958570bbc5a6cf1662b2cb51a46ea117b1e8d365b570df8da3a755af028a5b03bb", @generic="cde25aa6cf1f2b48fa3ce1076e5a9997abe08b1714310071313ebc5abebb7475af0b5d02fabc9a30714572f2c60bceee739cfa4553", @generic="886ccbf69645849e23248bf909ad948e7adc7f2ae8fd5bc3e0f591a038598916b03a99a2187814cbca79dc21c945a6ef359399107cd6bab0338b28323b697665e866482cbf0bd67c6abdc330110164ec5e117bc7b3f9eddd178f4295e782fba99d55d39beff393e09ec791d510", @typed={0x8, 0x48, 0x0, 0x0, @ipv4=@rand_addr=0x7}, @generic="42681a524f1ceac1dedb7a6a6cc9c5ed062ef571d8523a976055b7f2263b5fe00b86b7453e0556c4d322db1b66abac393c6d415e4e88b4ed626e80fe6057e01a032127138b9b3e7c0e9e6f1cabb5bef2a322f33f003e987330e23826b39f43dc431400237651bf283a09cd89b85a4ef7dbe619ef14889846b49a8e4ffdb474e92e15fd7a3703381899a6cb07f902ad53add575c0bfb73970ba60fb", @generic="73d7d20b339f96574810da8a0953b9179e72963c2fa5f67bc47c7f877787c0057df93699313c71979f24d311a33f83b86499e6e370", @typed={0x8, 0x8f, 0x0, 0x0, @u32=0x8001}]}, @typed={0x5b, 0x6b, 0x0, 0x0, @binary="7cf780403d67187f9b3df6dd1942c5d407fcf97d62c4ed569b363d7a7ac75dbce37638a1490f76b8edc323689bafcc1d0e6dff346f4ada0162e61b4ffe059d2a573caf937816df27c8b46190f42fe5658c09a16270a14d"}]}, 0x668}}, 0x28000085) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000080)=0x4) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"}) [ 1051.017952][ T7625] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:35:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a0000070000000000000005001a00ac14140000004b5a536182ee6408d47be5e4ae00000000000000000000ac1e000100000000000000000000000000000000e353ccb50c5d670d9b7d14898f0b8569ba904fc08914489492b047a4040eb860d653f22eddb45a0d1544"], 0x38}}, 0x0) 06:35:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="020a00000700000000000005001a00ac14140a000000000000000000000000008000000000000000000000000000cfbe600e00"], 0x38}}, 0x0) 06:35:48 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1051.588675][ C0] sd 0:0:1:0: [sg0] tag#6609 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1051.599563][ C0] sd 0:0:1:0: [sg0] tag#6609 CDB: Test Unit Ready [ 1051.606409][ C0] sd 0:0:1:0: [sg0] tag#6609 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1051.616311][ C0] sd 0:0:1:0: [sg0] tag#6609 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1051.626279][ C0] sd 0:0:1:0: [sg0] tag#6609 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1051.636232][ C0] sd 0:0:1:0: [sg0] tag#6609 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1051.647585][ C0] sd 0:0:1:0: [sg0] tag#6609 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1051.657478][ C0] sd 0:0:1:0: [sg0] tag#6609 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1051.667353][ C0] sd 0:0:1:0: [sg0] tag#6609 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1051.677334][ C0] sd 0:0:1:0: [sg0] tag#6609 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1051.687245][ C0] sd 0:0:1:0: [sg0] tag#6609 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1051.697154][ C0] sd 0:0:1:0: [sg0] tag#6609 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1051.707706][ C0] sd 0:0:1:0: [sg0] tag#6609 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1051.717606][ C0] sd 0:0:1:0: [sg0] tag#6609 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1051.727531][ C0] sd 0:0:1:0: [sg0] tag#6609 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1051.737424][ C0] sd 0:0:1:0: [sg0] tag#6609 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1051.747312][ C0] sd 0:0:1:0: [sg0] tag#6609 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 1051.836131][ T7625] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 06:35:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000100)) r2 = dup2(r0, r0) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f00000000c0)={0x6}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000000)={0x0, 0x33175322, 0x1, 'queue1\x00', 0x8}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="020a000007000b00001400000000000005001a00ac1414da6c0000000000006a511689d109db44b5314213cefc0000000000ac1e00010000"], 0x38}}, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x4143, 0x0) 06:35:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000080)) r5 = syz_open_pts(r4, 0x1) write(r5, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) prctl$PR_GET_SECCOMP(0x15) [ 1052.110751][ T7651] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. 06:35:49 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400080, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x1000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x87ffffff9) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a000007000000000000000000000005001a00ac141400000000000000000000000000ac1e0001000008000000000000fff100000000000c6152000000006d0ea6c9"], 0x38}}, 0x0) 06:35:49 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000ffff0000000000009820000000003b086803ffff633b27e59aa14417000000006d17c3f2c876c69901000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680814966ff9f2d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee09aa272c56100c796d74c92fad7e34bd5f0e4542636c2cb6222bc224649282af53ba5f496b75b8a42657e0c0a675cc276304f3c1955e3e18f161d21d606f2ef2a7ec42902015d553235041a8a08a6d0470d519f61067d7e38717e69aa37681e5711a657e80950afb00e24f3f9567a61f77f817eaaa7af8e75e847a57fb014eb65fc813258f995a0505f1baa5d318fdaee68ff2be4f913f5cc8e883f0900000000000000c5a8a00e5085b900"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') 06:35:49 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') read$eventfd(r0, &(0x7f0000000080), 0xff97) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='vxfs\x00', 0x804469, &(0x7f0000000100)='\xa6\xb5\xb8Fa\n6\t^\xb0\xd3\xce)ya&/\xd3\xe4\x10A1VH3T\v>\xa7Z\xc1\xd5\'B\x8d\xbe\xe3G\b}\x87%j\x16\xbc/+<\\)\x19\xd0[\xbe\x9f\xb2U[\xfbCo\xb0\x1eQ\xff\x05\x03\xdb\x86\xe2\x9b\x9c\xc6`q', 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x8002, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x1, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x8000) [ 1053.077461][ T7681] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 06:35:50 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f00000000c0)=0xc3) r1 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r1, &(0x7f0000002080)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1a, 0x0, 0x0, &(0x7f0000001780)=[@dstopts_2292={{0x18}}, @hoplimit_2292={{0x37b}}], 0x30}}], 0x400021f, 0x0) [ 1053.151613][ T7683] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 06:35:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f0000000380)}}, 0x10) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, &(0x7f0000000000)={0x0, 0x5, 0x200b, 0x1}) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r6, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="d5c042395aa2408b1a463757bba1652b661c33e0763c0feed5b115af3efb6c04425a16f95ac6abd1a72a9679f1a0309b21f1c4b057b2631a53842805eff437cc427db18f851737996380b0f36259a2b7236242df7053eb4cd7d8aaefacba966def4043c0b129e4bb053a165e7ed9c298be99e54da3aa243e53689badca83c5dc904eebaf77f19e02492e9b0290b6a8678320c5a1df1c88fda43942b3ed798758f921efeeba3d0c7783f2a17f6d6e1ee7c7ac9c0e9b1057a7bd432cad97b25b0e787c", 0xc2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x4, 0x0}}]}, 0x38}}, 0x0) 06:35:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x1) exit(0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7f, 0x80) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000100)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r9, 0x41007701, &(0x7f0000000200)='/dev/media#\x00') ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f00000000c0)) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000001200)={0x8c, "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"}) write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{0x4, 0x0, 0x8}, 0xf4}}, 0x18) [ 1053.652539][ T7699] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 06:35:50 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') 06:35:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400206) clone(0x4413cd00, 0x0, 0x0, 0x0, 0x0) [ 1053.880624][ T7704] IPVS: ftp: loaded support on port[0] = 21 [ 1053.918170][ C1] sd 0:0:1:0: [sg0] tag#6611 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1053.928946][ C1] sd 0:0:1:0: [sg0] tag#6611 CDB: Test Unit Ready [ 1053.935716][ C1] sd 0:0:1:0: [sg0] tag#6611 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1053.945684][ C1] sd 0:0:1:0: [sg0] tag#6611 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1053.955680][ C1] sd 0:0:1:0: [sg0] tag#6611 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1053.965588][ C1] sd 0:0:1:0: [sg0] tag#6611 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1053.975433][ C1] sd 0:0:1:0: [sg0] tag#6611 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1053.985280][ C1] sd 0:0:1:0: [sg0] tag#6611 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1053.995120][ C1] sd 0:0:1:0: [sg0] tag#6611 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1054.004932][ C1] sd 0:0:1:0: [sg0] tag#6611 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1054.014858][ C1] sd 0:0:1:0: [sg0] tag#6611 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1054.024869][ C1] sd 0:0:1:0: [sg0] tag#6611 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1054.034770][ C1] sd 0:0:1:0: [sg0] tag#6611 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1054.044676][ C1] sd 0:0:1:0: [sg0] tag#6611 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1054.054584][ C1] sd 0:0:1:0: [sg0] tag#6611 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1054.064425][ C1] sd 0:0:1:0: [sg0] tag#6611 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06:35:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) [ 1054.074310][ C1] sd 0:0:1:0: [sg0] tag#6611 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 1054.229477][ T7547] tipc: TX() has been purged, node left! 06:35:51 executing program 1: r0 = socket$kcm(0x10, 0x5, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b00160010000000000004140e00090002000000dc2976d153b4", 0x2e}], 0x1}, 0x4040890) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='.\x00') 06:35:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0xffffffffffffff52, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x60}}, 0x0) r3 = dup3(r2, r1, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r4, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r9, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000020}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@gettclass={0x24, 0x2a, 0x800, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x14, 0x3}, {0x1, 0x1}, {0xffe0, 0x8}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed={[], 0x12}}, 0xa) 06:35:51 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0xe0040, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x14}) r5 = syz_open_pts(r3, 0x1) write(r5, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSLCKTRMIOS(r8, 0x5457, &(0x7f0000000040)) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) 06:35:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = dup(r2) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000000)) 06:35:52 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') 06:35:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="9c0000001000050700000000000c370000000000c8b47987860a7e90f45d5c4d4f7b16da1c95684af110b4a6dd145fd4068d835fa82c17b416fb9d8bf948", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="e1b49415642c249dc58c72a1d62e22b270c659ef95c90323e3a0d9d545edb46beece802952ef6bf6dd57e2811d714a1f1d89eec35f40d2fb5b849e58088cb6b10200850f741717abcdc2492e1cbb1157cbb33424d33e835196d4f132e0ea549374368e6e65bb581bceca12f5e1c0eb72c4d2e0a00a1500e8bb45dbc20e2a3329ea43ce3b580ce4975c88b212365ee8a2cdc3f409f3d50ded8cd48350111a1b85b78d62ab925ab8806178cc905e2c71818e28fbdd0b5a93a9a10c52310d576821f02d037792ab489118d7cc4efeb0c938f5a6ecab5edd34ba32cba43b3f8f5e99f90fd76f3bcc13b2e5eceb8a2033ca9611535627987ef2041e9cbff4db52c6355036bbebf19ac3cb59270c6b80b50e55fbd37982c1221e5aa255662654a93ae05f56958014c9b60361000c53bfa83e9c502187260991a9e5cabcdebba700319e9bdf6c556f85316762dccb21ba52d21ad998dfe75d4d485982c4ea0377e9e4750b1d5202f64e55f6b735a05b0e654d7e51c2ed15c045e51b8500"/387], 0x9c}}, 0x0) [ 1055.571221][ C1] sd 0:0:1:0: [sg0] tag#6612 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1055.581862][ C1] sd 0:0:1:0: [sg0] tag#6612 CDB: Test Unit Ready [ 1055.588634][ C1] sd 0:0:1:0: [sg0] tag#6612 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1055.598658][ C1] sd 0:0:1:0: [sg0] tag#6612 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1055.608582][ C1] sd 0:0:1:0: [sg0] tag#6612 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1055.618542][ C1] sd 0:0:1:0: [sg0] tag#6612 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1055.628567][ C1] sd 0:0:1:0: [sg0] tag#6612 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1055.638425][ C1] sd 0:0:1:0: [sg0] tag#6612 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1055.648337][ C1] sd 0:0:1:0: [sg0] tag#6612 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1055.658187][ C1] sd 0:0:1:0: [sg0] tag#6612 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1055.668289][ C1] sd 0:0:1:0: [sg0] tag#6612 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1055.678337][ C1] sd 0:0:1:0: [sg0] tag#6612 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1055.684717][ T7743] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1055.688248][ C1] sd 0:0:1:0: [sg0] tag#6612 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1055.708062][ C1] sd 0:0:1:0: [sg0] tag#6612 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1055.718024][ C1] sd 0:0:1:0: [sg0] tag#6612 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1055.727970][ C1] sd 0:0:1:0: [sg0] tag#6612 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1055.737919][ C1] sd 0:0:1:0: [sg0] tag#6612 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:35:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a000007000000000000000000000005001a00ac141400000000000000020000000000ac1e00010000000000000000000000000000000037cdffc67b1a0b775b66e68ef9ef660b9bc584f014ee0bf1292c494e85acd3a900358aa87a3f09b9dd4a6ba757decf5b79fb79256594159fab18f218e3407268db977e7f93263fcfc5e9ad86808704caa8767a3340cd90e8db9fc19c88a9ea300dd2537d89e3c9194e3171c1b543b06cfea8f27290b7368385b5f7b810dcd85640eee04f7b2256a95f1f24d495654f373c51739c80111f9bc944bdee1940c05cbba2e949"], 0x38}}, 0x0) 06:35:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x18, &(0x7f0000b67000), &(0x7f0000000140)=0xffffffffffffff45) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r3, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x2) 06:35:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001200)={{0x4, 0x0, 0xffffffff, 0x3, 'syz0\x00', 0x8000}, 0x5, 0x3, 0x8000000, r3, 0x7, 0x1, 'syz1\x00', &(0x7f00000000c0)=['mime_type+nodev\x00', '%\x00', '/dev/ptmx\x00', 'cpuset\x00', '\x00', '/dev/ptmx\x00', '/dev/ptmx\x00'], 0x38, [], [0x9, 0x8, 0x6, 0x25]}) exit(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) 06:35:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) write$9p(r6, &(0x7f0000000000)="593f92f5a96b9e2ef67c54059f66991c3e85be1eb93f0470b04a10a5f3b9bea25d70f861330292bbb96e4f788c9f1558069c484c937d55b8095e0acd46ddb669f1df28ba229d655ec20d79b870ae08d0befbd2f79f903cbf4f9e6bd76eac476797cd666a4e1955d2ebd03258f6b1d4fc35d1c4609ef7a01861958af87afef0bebba663bf58252b2bb291", 0x8a) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) [ 1056.221723][ T7757] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 06:35:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendmsg$sock(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000002100)='2', 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6, 0xfdc}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) 06:35:53 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1056.814146][ C0] sd 0:0:1:0: [sg0] tag#6613 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1056.825005][ C0] sd 0:0:1:0: [sg0] tag#6613 CDB: Test Unit Ready [ 1056.832176][ C0] sd 0:0:1:0: [sg0] tag#6613 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1056.842400][ C0] sd 0:0:1:0: [sg0] tag#6613 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1056.852328][ C0] sd 0:0:1:0: [sg0] tag#6613 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1056.862287][ C0] sd 0:0:1:0: [sg0] tag#6613 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1056.872260][ C0] sd 0:0:1:0: [sg0] tag#6613 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1056.882202][ C0] sd 0:0:1:0: [sg0] tag#6613 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1056.892160][ C0] sd 0:0:1:0: [sg0] tag#6613 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1056.902216][ C0] sd 0:0:1:0: [sg0] tag#6613 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1056.912101][ C0] sd 0:0:1:0: [sg0] tag#6613 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1056.922128][ C0] sd 0:0:1:0: [sg0] tag#6613 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1056.932469][ C0] sd 0:0:1:0: [sg0] tag#6613 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1056.942786][ C0] sd 0:0:1:0: [sg0] tag#6613 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1056.953219][ C0] sd 0:0:1:0: [sg0] tag#6613 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1056.963276][ C0] sd 0:0:1:0: [sg0] tag#6613 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1056.973192][ C0] sd 0:0:1:0: [sg0] tag#6613 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:35:54 executing program 1: openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x462040, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x4}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0xfffffffffffffffd, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000, 0x0, 0x4]}}, r6}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000200), r6}}, 0x18) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r6}}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x44}}, 0x0) 06:35:54 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0x401, 0x80040) bind$netlink(r0, &(0x7f0000001480)={0x10, 0x0, 0x25dfdbef, 0x80000000}, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x1) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001380)=ANY=[@ANYBLOB="84000000000201040000000000000000000000003c0002802c00018014000300c21c062a396c4533d15423b10aa8c37014000400fe8000000000000000000000000000aa0c0002800500010000000000300003802c00018004000300fe88000000000000000000000000000114002400000000000000000000000000000000010400018068b831d19619f9922416cb8c405a59a00ae5a53133866aa1f686c0a6f21391106f73a2aaed2f7bed9c5681a34e002567ddc9d9504dc443b5a17a4716c2da021625f7f4b48600e41a87908d3781e07500771957d0e6e9e7d7ab8da9f21cf1"], 0x84}}, 0x0) ioctl$sock_netdev_private(r3, 0x89ff, &(0x7f0000000180)="00e5bde1c09787c82d44dd570874ab4d66d4666453bff7730da591a97a6821e3001baa4bba") restart_syscall() exit(0x0) readv(r1, &(0x7f0000002380)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000000040)=""/146, 0x92}, {&(0x7f0000001200)=""/148, 0x94}, {&(0x7f0000002400)=""/4088, 0xff8}, {&(0x7f00000012c0)=""/152, 0x98}], 0x5) 06:35:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) pipe2(&(0x7f0000000000), 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r5, 0x6431) r6 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x9, 0x101000) r7 = socket$inet(0xa, 0x801, 0x84) sendmsg$inet(r7, &(0x7f00000026c0)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x81e}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000002c0)="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", 0x1c5}], 0x1}, 0x0) listen(r7, 0x3) r8 = accept4(r7, 0x0, 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000480)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f0000000780)={r10, 0x70, "2f00e812e554d8fdb595f40ac122b26a09e2261c8b16033625fa0c9be4be7fbfcedb2f1066f5b7ed3dce5e4175bc78985a34e1444b8f73a669e77ce516fb931540e3786b57befd8a77958168ac1e6b61f22e34b37391b83f72df04e1a3c441eed5cfe3fb5ea1bc321b1c62bdc7a596d3"}, &(0x7f0000000140)=0x78) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000080)={r10, 0x27, "4bd95d66844536fdb320a6f6979df6548e18ade43887e4b44eaf41abf522c40575fb7cc8a6399a"}, &(0x7f00000000c0)=0x2f) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0202000007000000000000000000000005001a00ac141400000000000000000000000000ac1e000100"/56], 0x38}}, 0x0) 06:35:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003f80)=[{{0x0, 0x0, 0x0}, 0xc82c}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r4 = dup2(r2, r3) ioctl$CAPI_INSTALLED(r4, 0x80024322) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x301, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0xffffffffffffffcc, 0x0, 0x0, 0x0}, 0x40) socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x8955, &(0x7f0000000000)=0xfffffffffffffffe) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/arp\x00') preadv(r5, &(0x7f00000017c0), 0x315, 0x800000) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000080)=0x1e) [ 1057.527432][ T7787] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 06:35:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x2, 0x2) ioctl$VIDIOC_DQEVENT(r4, 0x80885659, &(0x7f00000000c0)={0x0, @frame_sync}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, &(0x7f0000000000)) r6 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) 06:35:54 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[], 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1057.805595][ T7792] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1058.019656][ C0] sd 0:0:1:0: [sg0] tag#6614 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1058.030796][ C0] sd 0:0:1:0: [sg0] tag#6614 CDB: Test Unit Ready [ 1058.037906][ C0] sd 0:0:1:0: [sg0] tag#6614 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1058.048190][ C0] sd 0:0:1:0: [sg0] tag#6614 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1058.058320][ C0] sd 0:0:1:0: [sg0] tag#6614 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1058.068598][ C0] sd 0:0:1:0: [sg0] tag#6614 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1058.078662][ C0] sd 0:0:1:0: [sg0] tag#6614 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1058.088765][ C0] sd 0:0:1:0: [sg0] tag#6614 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1058.105371][ C0] sd 0:0:1:0: [sg0] tag#6614 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1058.115349][ C0] sd 0:0:1:0: [sg0] tag#6614 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1058.125329][ C0] sd 0:0:1:0: [sg0] tag#6614 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1058.135452][ C0] sd 0:0:1:0: [sg0] tag#6614 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1058.145558][ C0] sd 0:0:1:0: [sg0] tag#6614 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1058.155707][ C0] sd 0:0:1:0: [sg0] tag#6614 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1058.165782][ C0] sd 0:0:1:0: [sg0] tag#6614 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1058.176221][ C0] sd 0:0:1:0: [sg0] tag#6614 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1058.186488][ C0] sd 0:0:1:0: [sg0] tag#6614 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:35:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1d}]}, 0x38}}, 0x0) [ 1058.227887][ T7784] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1058.346975][ T7792] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 06:35:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) lookup_dcookie(0x20100024, &(0x7f0000001280)=""/115, 0xfffffffffffffde5) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) 06:35:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000000)={0xf59, 0x5, 0x7}) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) 06:35:55 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1058.923080][ C0] sd 0:0:1:0: [sg0] tag#6622 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1058.935110][ C0] sd 0:0:1:0: [sg0] tag#6622 CDB: Test Unit Ready [ 1058.942541][ C0] sd 0:0:1:0: [sg0] tag#6622 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1058.952717][ C0] sd 0:0:1:0: [sg0] tag#6622 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1058.962623][ C0] sd 0:0:1:0: [sg0] tag#6622 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06:35:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="020a00000700000000000000000000000500141400000000000000000000000000ac33000000000000"], 0x38}}, 0x0) [ 1058.973154][ C0] sd 0:0:1:0: [sg0] tag#6622 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1058.983169][ C0] sd 0:0:1:0: [sg0] tag#6622 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1058.993201][ C0] sd 0:0:1:0: [sg0] tag#6622 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1059.004010][ C0] sd 0:0:1:0: [sg0] tag#6622 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06:35:56 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[], 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1059.014386][ C0] sd 0:0:1:0: [sg0] tag#6622 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1059.024334][ C0] sd 0:0:1:0: [sg0] tag#6622 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1059.035588][ C0] sd 0:0:1:0: [sg0] tag#6622 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1059.045661][ C0] sd 0:0:1:0: [sg0] tag#6622 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1059.055567][ C0] sd 0:0:1:0: [sg0] tag#6622 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1059.065660][ C0] sd 0:0:1:0: [sg0] tag#6622 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1059.075687][ C0] sd 0:0:1:0: [sg0] tag#6622 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1059.085736][ C0] sd 0:0:1:0: [sg0] tag#6622 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 1059.283449][ C1] sd 0:0:1:0: [sg0] tag#6623 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1059.294636][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB: Test Unit Ready [ 1059.301519][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1059.311452][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1059.321531][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1059.331534][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1059.341791][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1059.352219][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1059.362319][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1059.372962][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1059.383712][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1059.393953][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1059.405357][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1059.416008][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1059.426430][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1059.436551][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1059.446553][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:35:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x1) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) 06:35:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x8880, 0x0) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000140)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd2(0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_MAP={0x24}]}, 0x44}}, 0x0) 06:35:57 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)={0xffffffff, 0x1, 0x4, 0x80000000, 0x20, {r5, r6/1000+10000}, {0x4, 0x8, 0xe0, 0xf9, 0x55, 0xff, "1699bb1d"}, 0x6, 0x2, @userptr=0xffff, 0x0, 0x0, r0}) ioctl$LOOP_CLR_FD(r7, 0x4c01) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f000051b000/0x3000)=nil], &(0x7f000026bfec), &(0x7f0000002000), 0x0) 06:35:57 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x10, 0x4d5, 0x4d4}]}, 0x20}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x240000, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000002b00)={'vxcan1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r6, @ANYBLOB="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"], 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r11, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r11, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r12, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) getsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f0000002b40)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000002c40)=0xe8) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r14, 0x8933, &(0x7f0000002c80)={'batadv0\x00', 0x0}) r16 = socket$nl_route(0x10, 0x3, 0x0) r17 = socket$nl_route(0x10, 0x3, 0x0) r18 = socket$netlink(0x10, 0x3, 0x0) r19 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r18, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r20, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r17, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r20, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r20, {}, {}, {0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) r21 = socket$nl_route(0x10, 0x3, 0x0) r22 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r21, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="20aa9979bfe940fc00000007000d04000000000000000000000000d16b0d4b9a47f1e69743db27a8b63b7146681955f4e2498959619958b04f7b8544b3764bd31cb115cfa588660a8effa37f1f24e0e631cd9c153a309188a62701706061dcb467349d7672892ca0987a5b28d7acdc133f1c6d6ae08c442b1a1110c0395c75fc8cfe5e28700fb15bcf97a2a72a51eadd", @ANYRES32=r23, @ANYBLOB="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"], 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000003080)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003040)={&(0x7f0000002cc0)={0x35c, r2, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xf4, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xd8, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_STRSET_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @ETHTOOL_A_STRSET_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r23}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0x35c}}, 0x44) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000040)={0x2, 'syz0\x00'}) 06:35:57 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000ffff0000000000009820000000003b086803ffff633b27e59aa14417000000006d17c3f2c876c69901000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680814966ff9f2d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee09aa272c56100c796d74c92fad7e34bd5f0e4542636c2cb6222bc224649282af53ba5f496b75b8a42657e0c0a675cc276304f3c1955e3e18f161d21d606f2ef2a7ec42902015d553235041a8a08a6d0470d519f61067d7e38717e69aa37681e5711a657e80950afb00e24f3f9567a61f77f817eaaa7af8e75e847a57fb014eb65fc813258f995a0505f1baa5d318fdaee68ff2be4f913f5cc8e883f0900000000000000c5a8a00e5085b900"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[], 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1060.295727][ C1] sd 0:0:1:0: [sg0] tag#6624 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1060.307451][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB: Test Unit Ready [ 1060.314644][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1060.324811][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1060.334916][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1060.345142][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1060.355473][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1060.365549][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1060.375407][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1060.385259][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1060.395880][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1060.406218][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1060.416600][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1060.427229][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1060.439293][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1060.451688][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1060.463118][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 1060.578121][ T7849] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. 06:35:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x4161, 0x0) r2 = syz_open_pts(r0, 0x1) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) readv(r0, &(0x7f0000001500)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f00000000c0)=""/111, 0x6f}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000001300)=""/193, 0xc1}, {&(0x7f0000001400)=""/253, 0xfd}], 0x6) [ 1060.906651][ T7859] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. 06:35:58 executing program 1: openat$vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vsock\x00', 0xa0020, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000001fd8)=ANY=[@ANYBLOB="bd3c588675000000"], &(0x7f0000000180)='GPL\x00', 0x60, 0x0, 0x0, 0x41100, 0x4, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x5) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") socket(0x80000009, 0x400000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$caif_stream(0x25, 0x1, 0x1) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(0xffffffffffffffff, 0x0, 0x145) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xbf) connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe2a) bind$inet(r4, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000001c0)={0x6, 0x6, 0x4, 0x10000, 0x8, {}, {0x1, 0x8, 0x4, 0xff, 0x8, 0x5, "d2cb3483"}, 0x0, 0x2, @fd=r7, 0x1, 0x0, 0xffffffffffffffff}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup3(r10, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x1, r12, 0x10, 0x1, @in={0x2, 0x4e23, @remote}}}, 0xa0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0xfffffffffffffffd, 0x40000007fff, 0x7ffffffe}, 0x14) shutdown(r4, 0x2) [ 1061.100532][ T7868] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 06:35:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) 06:35:58 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r6, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r6, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1061.301868][ C1] sd 0:0:1:0: [sg0] tag#6625 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1061.313885][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB: Test Unit Ready [ 1061.321052][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1061.332363][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1061.343932][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1061.356099][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1061.367737][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1061.379492][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1061.391292][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1061.402560][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1061.413255][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1061.424201][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1061.435947][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1061.447185][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1061.458503][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1061.470833][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1061.481146][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:35:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000002c0)={'\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="8c000000000201040000000000000000000000003c0002802c0001c21c062a396c4533d15423b10aa8c37014000400fe8000000000000000000000000000aa0c00028005000100000000003000353e6acb9f60ffedacb1b003802c0001801400030025fdf4dc000000000000000000000001140004000000000000000000000000000000000109000600736e"], 0x8c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000380)={0x0, 0x7}) r4 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0x8, 0x187180) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="84000000000201040000000000000000000000003c00f27f2c0001a014000300c21c062a396c4533d15423b10aa8c37014000400fe800000000000000000c07e85a600aa0c0002800500010000000000300003802c00018004000300fe880000000000000000000000000001140004000000000000000000000000000000000104000180"], 0x84}}, 0x0) fstat(r6, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000006c0)={0x3f, 0x0, {r5}, {r7}, 0x8, 0x1000}) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x5c, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a4533d15423b10aa8c37000"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x5c}}, 0x20004090) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r9, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f00000004c0), &(0x7f0000000500)=0x14) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) ioctl$sock_SIOCOUTQNSD(r8, 0x894b, &(0x7f0000000300)) r10 = dup2(r3, r0) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r11, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r11, 0xfffffffffffffffd, 0x4000000) rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x7, 0x7, 0x0, 0x3ff}, 0x3}, 0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="020a170007000000000000000000000005001a00ac141400000000000000000000000000ac1e000100"/56], 0x38}}, 0x0) 06:35:58 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000002040)=@can, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000008c0)=""/123, 0x7b}], 0x1}}], 0x3b, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000000303000000000000000000ea00000000080003400000000008000340000000000800034000000000"], 0x2c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000d00)={0x94, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x94}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="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"], 0x17c}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000c00)=""/205, 0xcd}, {&(0x7f0000000ac0)=""/168, 0xa8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/25, 0x19}, {&(0x7f0000000a40)=""/85, 0x55}], 0x2}}], 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xb7d}], 0x81, &(0x7f0000000600)=""/191, 0x97}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth1_to_bond\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="1d"]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="256c0000000000000000010000"], 0x3}}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x400}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4c000) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, r6, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4800) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x1e, 0x0, &(0x7f0000000040)) [ 1061.891639][ T7882] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. 06:35:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) r2 = dup(r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) fanotify_mark(r2, 0x8, 0x20000001, r6, &(0x7f0000000040)='./file0\x00') exit(0x0) readv(r0, &(0x7f0000000140), 0x0) [ 1061.959765][ T7882] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1062.041466][ T7882] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. 06:35:59 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r6, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r6, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') 06:35:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @nl=@unspec, @ipx={0x4, 0x0, 0x3, "5bb0842870d0", 0x9}, @hci={0x1f, 0x2}, 0x800, 0x0, 0x0, 0x0, 0x7e1a, &(0x7f0000000000)='ip6_vti0\x00', 0x3000000000000000, 0xff, 0x1}) socket$inet_smc(0x2b, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1fd}, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) [ 1062.420357][ C0] sd 0:0:1:0: [sg0] tag#6626 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1062.433474][ C0] sd 0:0:1:0: [sg0] tag#6626 CDB: Test Unit Ready [ 1062.440605][ C0] sd 0:0:1:0: [sg0] tag#6626 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1062.453025][ C0] sd 0:0:1:0: [sg0] tag#6626 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1062.463034][ C0] sd 0:0:1:0: [sg0] tag#6626 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1062.473253][ C0] sd 0:0:1:0: [sg0] tag#6626 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1062.483143][ C0] sd 0:0:1:0: [sg0] tag#6626 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1062.493414][ C0] sd 0:0:1:0: [sg0] tag#6626 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1062.503741][ C0] sd 0:0:1:0: [sg0] tag#6626 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1062.513818][ C0] sd 0:0:1:0: [sg0] tag#6626 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1062.524041][ C0] sd 0:0:1:0: [sg0] tag#6626 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1062.534463][ C0] sd 0:0:1:0: [sg0] tag#6626 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1062.544829][ C0] sd 0:0:1:0: [sg0] tag#6626 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1062.554768][ C0] sd 0:0:1:0: [sg0] tag#6626 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1062.565142][ C0] sd 0:0:1:0: [sg0] tag#6626 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1062.575904][ C0] sd 0:0:1:0: [sg0] tag#6626 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06:35:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) keyctl$dh_compute(0x17, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={'xcb-(((st5(\x00'}}) [ 1062.576010][ C0] sd 0:0:1:0: [sg0] tag#6626 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 1062.982384][ T7908] could not allocate digest TFM handle xcb-(((st5( [ 1063.071441][ T7915] could not allocate digest TFM handle xcb-(((st5( 06:36:00 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x8cd500e65379d9ba, 0x0) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000040)) write$P9_RWALK(r0, 0x0, 0x0) [ 1063.250713][ T7904] __nla_validate_parse: 1 callbacks suppressed [ 1063.250743][ T7904] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. 06:36:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000080)=0x4) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r7, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x60, 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000040)=""/217) r8 = syz_open_pts(r0, 0x1) write(r8, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) 06:36:00 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r6, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r6, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1063.548564][ C0] sd 0:0:1:0: [sg0] tag#6627 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1063.561262][ C0] sd 0:0:1:0: [sg0] tag#6627 CDB: Test Unit Ready [ 1063.568361][ C0] sd 0:0:1:0: [sg0] tag#6627 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1063.579206][ C0] sd 0:0:1:0: [sg0] tag#6627 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06:36:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) syz_open_pts(r0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x484001, 0x0) dup2(r0, r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') [ 1063.589595][ C0] sd 0:0:1:0: [sg0] tag#6627 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1063.600294][ C0] sd 0:0:1:0: [sg0] tag#6627 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1063.611668][ C0] sd 0:0:1:0: [sg0] tag#6627 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1063.622477][ C0] sd 0:0:1:0: [sg0] tag#6627 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1063.632617][ C0] sd 0:0:1:0: [sg0] tag#6627 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1063.643306][ C0] sd 0:0:1:0: [sg0] tag#6627 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1063.653733][ C0] sd 0:0:1:0: [sg0] tag#6627 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1063.664473][ C0] sd 0:0:1:0: [sg0] tag#6627 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1063.674481][ C0] sd 0:0:1:0: [sg0] tag#6627 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1063.684534][ C0] sd 0:0:1:0: [sg0] tag#6627 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06:36:00 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000000)={0x7, 'netpci0\x00', {0x6}, 0xfffa}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r5, @ANYRESDEC=r1, @ANYRES32=r6, @ANYRESOCT=r7, @ANYRESDEC]], 0x8}}, 0x0) [ 1063.694640][ C0] sd 0:0:1:0: [sg0] tag#6627 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1063.705024][ C0] sd 0:0:1:0: [sg0] tag#6627 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1063.715138][ C0] sd 0:0:1:0: [sg0] tag#6627 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 1063.864939][ T7939] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1063.886522][ T7939] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1063.897754][ T7939] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1063.910378][ T7939] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1063.929079][ T7939] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1063.941886][ T7942] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1063.955944][ T7943] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1063.983636][ T7941] debugfs: File '7940' in directory 'proc' already present! 06:36:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000380)={{0x2, 0x1, 0x7f, 0xfffffe00, '\x00', 0xffffff7f}, 0x1, [0xc1b, 0x20, 0x1, 0x0, 0x100000000, 0x2, 0xffffffff, 0x7, 0x80000000, 0x401, 0x1, 0x200, 0x7, 0x0, 0x5, 0x8000, 0x1, 0xffff, 0x9, 0x5, 0x400, 0x100, 0x6, 0x2, 0x9, 0x4, 0x80, 0x4, 0xb46, 0x1, 0x6, 0x5, 0x8, 0xff, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x4, 0x4, 0xffffffffffffff80, 0x6, 0x7fff, 0xd381, 0xff, 0xffff, 0x8, 0x7, 0x3, 0x1, 0x8, 0x7a1, 0x8, 0x3, 0x2, 0x100000001, 0x4, 0x7, 0x0, 0x0, 0x6, 0xba3, 0x1, 0x7fff, 0xfd9, 0x5, 0x6, 0x0, 0x8001, 0x9, 0x7, 0xd72, 0x9, 0x0, 0x7fff, 0x7fffffff, 0x5bb, 0x9, 0x0, 0xffffffffffff5a7d, 0x3, 0x7fffffff, 0xfffffffffffffce6, 0x400, 0x6, 0x200000000000000, 0x4, 0x81, 0x7271, 0x2, 0x2, 0x40, 0x7187, 0x1ff, 0x1, 0x2, 0x1000, 0x3f, 0x5, 0x3f, 0x1, 0x7ff, 0x8001, 0xfffffffffffffffb, 0x1, 0xffff, 0x2, 0x101, 0x6, 0xc9, 0x4, 0x80, 0x8, 0xce8, 0x1f, 0x7ff, 0xfffffffffffffa0e, 0x3, 0x7fffffff, 0x5, 0x4, 0x7, 0xfddf, 0x0, 0x100000000, 0x9, 0x5, 0x101, 0x4]}) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KDMKTONE(r1, 0x4b30, 0x80) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000040)={0x8, 0x15e7, 0x8001, 0x84000, r1}) splice(r3, &(0x7f0000000000)=0x9, r7, &(0x7f0000000080)=0x8000, 0xc6f, 0x251bf4f76da999a5) 06:36:01 executing program 1: clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000540)='\xb5\xe25\x95et1+eth0\x00', 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) r1 = getpid() r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x4) fcntl$getownex(r3, 0x10, &(0x7f00000000c0)={0x0, 0x0}) kcmp(r4, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) [ 1064.274897][ T7950] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. 06:36:01 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1064.419824][ T7950] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. 06:36:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) r2 = dup2(r0, r0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000380)="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", 0x1000) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) sendto$inet(r3, 0x0, 0x0, 0x20008002, &(0x7f0000db4ff0)={0x2, 0x0, @loopback}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x680081, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @window={0x3, 0x3, 0x34ea}, @sack_perm, @window={0x3, 0x3ff, 0x6}], 0x4) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) [ 1064.694703][ C1] sd 0:0:1:0: [sg0] tag#6634 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1064.706814][ C1] sd 0:0:1:0: [sg0] tag#6634 CDB: Test Unit Ready [ 1064.713604][ C1] sd 0:0:1:0: [sg0] tag#6634 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1064.724239][ C1] sd 0:0:1:0: [sg0] tag#6634 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1064.734289][ C1] sd 0:0:1:0: [sg0] tag#6634 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1064.744505][ C1] sd 0:0:1:0: [sg0] tag#6634 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1064.754649][ C1] sd 0:0:1:0: [sg0] tag#6634 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1064.764844][ C1] sd 0:0:1:0: [sg0] tag#6634 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1064.775075][ C1] sd 0:0:1:0: [sg0] tag#6634 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1064.785079][ C1] sd 0:0:1:0: [sg0] tag#6634 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1064.795466][ C1] sd 0:0:1:0: [sg0] tag#6634 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1064.805666][ C1] sd 0:0:1:0: [sg0] tag#6634 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1064.815958][ C1] sd 0:0:1:0: [sg0] tag#6634 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1064.826147][ C1] sd 0:0:1:0: [sg0] tag#6634 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1064.838529][ C1] sd 0:0:1:0: [sg0] tag#6634 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1064.849046][ C1] sd 0:0:1:0: [sg0] tag#6634 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1064.859086][ C1] sd 0:0:1:0: [sg0] tag#6634 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:36:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r1 = dup2(0xffffffffffffffff, r0) write$FUSE_IOCTL(r1, &(0x7f0000000040)={0x20, 0x0, 0x3, {0x7, 0x4, 0x800, 0x7ff}}, 0x20) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00005befdc)) write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000001200)='/dev/nvram\x00', 0x28b39e33008f7a8e, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) 06:36:02 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x3}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) dup(0xffffffffffffffff) sendmsg$sock(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f0000000780)="1f11c391ebb0498200c347e9bd47244fd3a5c023544bcb8aa2529d374448452e2f7b27efda85e330dc9220b9081ef4e1f31c0e632cad4fc988caf71b479bc6c8e1c31a471c76fcd44961d295561c906c7f45fb3d2197e86aa42fa237e4880e1c43f22ef649b1e31f8eac87aef5fd0dc37827e4d4c83a4b80dcc5b6d97b441cbfc8", 0x81}, {&(0x7f0000000840)="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", 0xfd}, {&(0x7f0000000940)="c97bead89525da49a6e9e27830e41ac4aa53b96bf12be3495b331e23ee0c4747d34977d8bf41ab9f082d981f820fa784fd2274ad3944d71110286a211b65db461de7cd29323b", 0x46}, {&(0x7f00000009c0)="9a97b4714716eac6000e39ae06bb1893e3abdb1c3bc5439ded8ec8258984d920fd5c16aa0e08751b24f01dfbe9739d021138fe06f497c78c21c8c2aeb603c16ad31d42ed3f239652eced63555f131fba39d3cb2bac97a366e5b3aacf5705ae4ae9bfece85d6c15f38cf83738cbd3d0648ceb04dceb7d968e12f6be4a7cf42dcaf8fc9ec5a4c44ce73338ead1d78e9054becf951dd58c56d458f90d69dad1bea60ac98f3ffc14fd9d7d0b984911e3d4e82eb41ec3236ac6f6460e4fb7", 0xfffffdd9}, {&(0x7f0000000a80)="8b392db9b7a4ffb8f4184472a38d4021e56db1c33c4b2b363aa62702ccc4c13a65eca09d69ea4a69debbb41b0862798f28174adb11b105f136e0410359c1f3cc0e1eebe2490039a3806968aaefe814e21ed9596058b3450a5784210b84cbc39cbac76865ea762634b394bf62656fed0bed1daf55aa352b13e45b08c63726b9956e3879922591e38b9f149cca01321d3ecc7bc5c261cbc774e2a2d45e54c61f", 0x9f}, {&(0x7f0000000b40)="cc0004b41ece4bba9770befebb3520104bd32c10a73f84e0c8c28fe2f74d57d8b3d514616ecb3d72ad882932e78da5", 0x2f}], 0x7}, 0x48) 06:36:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$key(0xf, 0x3, 0x2) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="840000000002010400000000000017bf8c6c6a5e84a9d423f917bbc58a0000000000003c0002802c00018014000300c21c062a396c4533d15423b10aa8c37014000400fe8000aa0c2002800500010000000000300003802c00018004000300fe8800000000000000000096533adbe58b20ec000000000000000000000000000000000104"], 0x84}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000002010400000000000000000000000004000280040003800b000180"], 0x20}}, 0x2000000) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) write(r2, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x40, 0x0}}]}, 0x38}}, 0x0) 06:36:02 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1065.707052][ C0] sd 0:0:1:0: [sg0] tag#6635 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1065.720148][ C0] sd 0:0:1:0: [sg0] tag#6635 CDB: Test Unit Ready [ 1065.727686][ C0] sd 0:0:1:0: [sg0] tag#6635 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1065.737945][ C0] sd 0:0:1:0: [sg0] tag#6635 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1065.747850][ C0] sd 0:0:1:0: [sg0] tag#6635 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1065.758509][ C0] sd 0:0:1:0: [sg0] tag#6635 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1065.768736][ C0] sd 0:0:1:0: [sg0] tag#6635 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1065.779096][ C0] sd 0:0:1:0: [sg0] tag#6635 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1065.789169][ C0] sd 0:0:1:0: [sg0] tag#6635 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1065.799254][ C0] sd 0:0:1:0: [sg0] tag#6635 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1065.809746][ C0] sd 0:0:1:0: [sg0] tag#6635 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1065.819731][ C0] sd 0:0:1:0: [sg0] tag#6635 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1065.829880][ C0] sd 0:0:1:0: [sg0] tag#6635 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1065.840166][ C0] sd 0:0:1:0: [sg0] tag#6635 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1065.850358][ C0] sd 0:0:1:0: [sg0] tag#6635 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1065.861343][ C0] sd 0:0:1:0: [sg0] tag#6635 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1065.871594][ C0] sd 0:0:1:0: [sg0] tag#6635 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:36:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x4, 0x0, 0x0, 0x1d, 0x0, "0000000000000000000000000000cfad00"}) r1 = syz_open_pts(r0, 0x1) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) 06:36:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101082, 0x0) r10 = shmget$private(0x0, 0x4000, 0x1c40, &(0x7f0000ffb000/0x4000)=nil) shmat(r10, &(0x7f0000ffb000/0x2000)=nil, 0xfdffffffffffeffe) shmctl$IPC_RMID(r10, 0x0) shmctl$SHM_STAT_ANY(r10, 0xf, &(0x7f0000000280)=""/115) shmctl$SHM_UNLOCK(r10, 0xc) shmctl$SHM_STAT(r10, 0xd, &(0x7f0000000700)=""/220) syz_kvm_setup_cpu$x86(r9, r8, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f00000003c0)={&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000400)=""/114, 0x72}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup3(r11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000540), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r13, r13, r13}, &(0x7f00000000c0)=""/83, 0x53, &(0x7f00000001c0)={&(0x7f0000000040)={'poly1305-generic\x00'}}) r14 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r14) keyctl$search(0xa, r14, &(0x7f0000000100)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0) r15 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000600)="d383b405f5a38700674f6d061e180f9fc9a9c3bfeb3e86a3b7d1b572ca97fc2a5380d6af2885b549b790372dfee5a3c7e6423d11d04360b0ad08439ed65ea3c8c6c5feaf41741396a47fb00b31c69b4e4879e2c78dc29937088884c51a1d1b64e24cb499997371fb3fb6b044f209c1ba9cc1bdf432205a9a682e948042c97dac5ebe3acd702bb36b5fb847757c0b9b8fa237490212699f508655d72ca0ace66e994cfa32018b95990b09da556810e95aa51759c245a32f531df49eee9284ee7b8ba495869204224d866cbecffec314aada70945143741937ac8b2cb0ccafd0be4de184bb4a1ad9", 0xe7, r14) keyctl$instantiate_iov(0x14, r13, &(0x7f0000000140)=[{&(0x7f0000000a40)="0596d919c4f18001c3cdd34d6a98f70bba4e70094fd47b5199fd54e4147e8f6b42b7b34442d5e80c27de6de89435356e3e4d0a517880d18ba0cb72b5f94eb15f0000000000d4cb6400000000", 0x4c}, {&(0x7f0000000ac0)="886520defdb25cc68b136e5af5e86350cbd580d4765465b445c0176ae185e1d7ed8312f9d11ed9260cc1b05504d51468c40292d410f60ffc30d1d003772f948f1d3970b4b35bbaade1a2cfa8db033aa441a63b94a1356f75f9a7b053ce683224ba345cf8c9ef8ff3337ceddaaf5537e35c9f0aec410f97cfce6f799af1d8a637440901904d5e1ac6dccfa0ae06d9cfa6271e74b59fa8800845d8f223c14bededc82458444990abd4edfb3495dd5c6374146b04b79803044559e523dbfe7c96d24020e8e93070bd61935b56ca4cdc514f", 0xd0}, {&(0x7f0000000240)="4b4da63d3e107e4b2825117c7bd6ae9e590af6f0f90268c49425734fee40542f7f2f41045772624bf1ccc526ef6098aafff8760b8c66383e03a6c1170bc5ecefd9fbab06bf7e1c443e7b25f422e5d5", 0x4f}, {&(0x7f0000000580)="2826861013cb074b5e245c7b9d48ef7c1490513963debbe5f7391c193a7d398af65bef0bf4b788a5751ac9333ff7ec91ccf8da0d30aeb12241384dcdb2f5696e497d53926f8f0e6f6b869624b2ba0ed6a6a30f0ef7dcaea7e155d7f8d2b7ca9cfdf6b38881ea905966c46e0916712e1e4f1f707f29998caa", 0x78}], 0x4, r15) ioctl$SOUND_MIXER_READ_DEVMASK(r12, 0x80044dfe, &(0x7f0000000080)) r16 = dup2(r0, r0) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r17 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"/539], 0x38}}, 0x0) [ 1066.270172][ T33] audit: type=1800 audit(1580366163.322:33): pid=8000 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 06:36:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a000007000000000000000000000005001a00ac141400000000000000000000000000ac1e00aa6b08abcb80a8b51e6229e879dcee0100000000000099f246c80000000000004b03a3c9c62718c539843909a71ff4891c3827222e7e6f4e5aaffe3903f5e40208bfa331ad7f648ac70ec22923f541af389cc5a8268bfd6d585259f39c660ad93d485ff2d143d39d5842fdfd7e69a743297f22a72dabde7a9011c14479ce83d66e0eb084c3d2a3a86dc3401ce265c3c4256601a261396213b26a6ef9b229a86e5cf91379d2a84a60"], 0x38}}, 0x0) 06:36:03 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1066.778062][ C0] sd 0:0:1:0: [sg0] tag#6636 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1066.789216][ C0] sd 0:0:1:0: [sg0] tag#6636 CDB: Test Unit Ready [ 1066.796259][ C0] sd 0:0:1:0: [sg0] tag#6636 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1066.806673][ C0] sd 0:0:1:0: [sg0] tag#6636 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1066.817100][ C0] sd 0:0:1:0: [sg0] tag#6636 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1066.827212][ C0] sd 0:0:1:0: [sg0] tag#6636 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1066.838554][ C0] sd 0:0:1:0: [sg0] tag#6636 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1066.848704][ C0] sd 0:0:1:0: [sg0] tag#6636 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1066.859396][ C0] sd 0:0:1:0: [sg0] tag#6636 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1066.870580][ C0] sd 0:0:1:0: [sg0] tag#6636 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1066.880962][ C0] sd 0:0:1:0: [sg0] tag#6636 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1066.891578][ C0] sd 0:0:1:0: [sg0] tag#6636 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1066.901627][ C0] sd 0:0:1:0: [sg0] tag#6636 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1066.911621][ C0] sd 0:0:1:0: [sg0] tag#6636 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1066.921898][ C0] sd 0:0:1:0: [sg0] tag#6636 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1066.931925][ C0] sd 0:0:1:0: [sg0] tag#6636 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1066.942339][ C0] sd 0:0:1:0: [sg0] tag#6636 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:36:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_QUERYMENU(r5, 0xc02c5625, &(0x7f0000000000)={0x82, 0xe85b, @value=0x1f}) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYPTR64], 0x8}}, 0x8850) 06:36:04 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cgroups\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x141000) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x4, @empty, 0x538e}, {0xa, 0x4e23, 0x43, @loopback, 0x1}, 0x81, [0x8, 0x0, 0x7f, 0x3ff, 0x8000, 0x4, 0x40004000, 0x1000]}, 0x5c) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r3 = syz_open_pts(r1, 0x1) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) 06:36:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0xffffffffffffff9b, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0x0, 0x4}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) fadvise64(r2, 0x5, 0x8, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r10, r9, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000500)={0x0}) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) r15 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r15, r14, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r15, 0xc008640a, &(0x7f0000000540)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r10, 0xc008640a, &(0x7f0000000580)={r11, r16}) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r1, &(0x7f0000000140)='./file0\x00', 0x100, 0x10, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f00000004c0)={0xffffffffffffffff}, 0x800) write$FUSE_DIRENTPLUS(r19, &(0x7f0000000380)={0xa8, 0x0, 0x4, [{{0x1, 0x3, 0x1, 0x9, 0x10001, 0xfffffff9, {0x2, 0x1, 0x0, 0x510, 0x0, 0x6, 0xffffffff, 0x1875, 0x6, 0x2, 0x9000000, r17, r18, 0x5, 0x709}}, {0x0, 0x0, 0x0, 0x7fff}}]}, 0xa8) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{0x3, 0xff, 0x0, 0xfffffff7}]}) write(r3, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x8f3}, &(0x7f0000000040)=0x8) 06:36:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x9, 0x5, 0x12, 0x1, "9d0c6222ba0a340527520c4b6880a35a371a2f6035639aec55a2882555aaae0f77809dfa4f7a20ba7ae82552854f96fe77b4875bb2fc968f39f42b46f30b741b", "4b811c6f14175319148936fed5bb7dd4a00b4c315b5c2b8af35c010329a1a79b", [0x3, 0x8001]}) r5 = socket$key(0xf, 0x3, 0x2) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0xc0506617, &(0x7f0000000000)={{0x1, 0x0, @descriptor="79b90018b2d5582a"}, 0xeb, [], "92285728ef6803a73f7b9fc58c20aef34bce2054c2c3a6d3e183d18bf113d9461847a2a4a6bd146892366ac0d298f57c9412e426c258a6b95f91875b7b1a030d751ab501928f62147e60316111be62c60ad421a042b9513a7b311b9e539f3e39a6bde795456fdd8b503809fd9947a46f1e70fd5e308016dea79d8802c6acf9c877d22f65f198e08043d73dd476360fb133a737c9e6d2f34e2695a641061b3ea6f595000cf00e19aad1a8ececaebaa39e902f6de7d3238d8ad52e151ae596a24a3fa25780f8e71e1b92be6a688be75d5492658f923d0b471e59e586f2c343daea859f5b4e7c411956ce9524"}) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x2, 0x0, 0x8000, 0x25dfdbfd}, 0x10}}, 0x24040001) 06:36:04 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000ffff0000000000009820000000003b086803ffff633b27e59aa14417000000006d17c3f2c876c69901000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680814966ff9f2d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee09aa272c56100c796d74c92fad7e34bd5f0e4542636c2cb6222bc224649282af53ba5f496b75b8a42657e0c0a675cc276304f3c1955e3e18f161d21d606f2ef2a7ec42902015d553235041a8a08a6d0470d519f61067d7e38717e69aa37681e5711a657e80950afb00e24f3f9567a61f77f817eaaa7af8e75e847a57fb014eb65fc813258f995a0505f1baa5d318fdaee68ff2be4f913f5cc8e883f0900000000000000c5a8a00e5085b900"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1067.962174][ C0] sd 0:0:1:0: [sg0] tag#6637 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1067.972955][ C0] sd 0:0:1:0: [sg0] tag#6637 CDB: Test Unit Ready [ 1067.979584][ C0] sd 0:0:1:0: [sg0] tag#6637 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1067.989616][ C0] sd 0:0:1:0: [sg0] tag#6637 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1067.999519][ C0] sd 0:0:1:0: [sg0] tag#6637 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1068.009472][ C0] sd 0:0:1:0: [sg0] tag#6637 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1068.019412][ C0] sd 0:0:1:0: [sg0] tag#6637 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1068.029323][ C0] sd 0:0:1:0: [sg0] tag#6637 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1068.039269][ C0] sd 0:0:1:0: [sg0] tag#6637 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1068.049272][ C0] sd 0:0:1:0: [sg0] tag#6637 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1068.059169][ C0] sd 0:0:1:0: [sg0] tag#6637 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1068.069045][ C0] sd 0:0:1:0: [sg0] tag#6637 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1068.079097][ C0] sd 0:0:1:0: [sg0] tag#6637 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1068.088980][ C0] sd 0:0:1:0: [sg0] tag#6637 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1068.098971][ C0] sd 0:0:1:0: [sg0] tag#6637 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1068.108992][ C0] sd 0:0:1:0: [sg0] tag#6637 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1068.118986][ C0] sd 0:0:1:0: [sg0] tag#6637 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:36:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nf_conntrack_expect\x00') r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000280)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000340)={{0x8, 0x5, 0x7, 0x2, 'syz1\x00', 0xffffffff}, 0x3, 0x100, 0x6, r3, 0x8, 0x88, 'syz1\x00', &(0x7f00000002c0)=['F\x00', '\x00', '*posix_acl_accessselinux6md5sum-\x00', 'bdev\xc6\x00', 'IPVS\x00', '*])[keyring*^)lo-\x00', 'net/nf_conntrack_expect\x00', '\x00'], 0x5a, [], [0x200, 0xfff, 0xb07, 0x80]}) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x6}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x74, r2, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3f}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2c}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000044}, 0x48040) r4 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 06:36:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_EPOCH_SET(r5, 0x4008700e, 0x2) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) 06:36:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c151, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000200), 0xf}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000001c0)={r2}) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x394b) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000040)={0x101, 0x1, 0x1ff, 0x6, 0x5}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r7 = syz_open_pts(r0, 0x1) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r3, 0xc1004111, &(0x7f0000001200)={0x8, [0x20, 0x7, 0x1], [{0xfffffffa, 0x8, 0x0, 0x0, 0x1}, {0x0, 0x6, 0x0, 0x0, 0x1, 0x1}, {0x20cb95d7, 0x200, 0x1, 0x1}, {0xfff, 0x10000df, 0x0, 0x0, 0x1, 0x1}, {0x1f, 0x97, 0x0, 0x1}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x851, 0x0, 0x1, 0x0, 0x1}, {0x8, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x4, 0x7, 0x1, 0x1, 0x1}, {0x3, 0x401, 0x1}, {0x0, 0x55, 0x1, 0x0, 0x1}, {0x6, 0x4a66, 0x0, 0x0, 0x0, 0x1}], 0xffffffff}) write(r7, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) 06:36:05 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0xa0, 0x0, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}]}, 0xa0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r3, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r4, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="0700e0d7", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000380)=0x20) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000003c0)={r5, 0x3ff, 0x6, 0x7}, &(0x7f0000000400)=0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a17000200001900000000000000000229423539661ac9d2b1ce57c0895ce8394636c3ac7ffba44015bc97631a011351f15e1089d5b4c9051dc1e65028e2f795fbc8cebc4d9e153b607c2733ae56c0463e08578e48bd5d3723b21d398edf6dbd13176cb380f98b6e1742d0b8c3b04cf4761067062b3e3acf20bd077110bc41e2ab48a0db91e7"], 0x10}}, 0x0) 06:36:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_JPEGCOMP(r4, 0x408c563e, &(0x7f0000000280)={0xf43, 0x3, 0x16, "277c1f6d5cbb488628ae407a560d9727c5ef06a5bd3dd4c6d525e39eb3416a1a9b95484de62ac634e57076960dfa6e42170fcc415d54e099b7fef7cf", 0x5, "e20d3d807b3900f8cefcbeda3cfb83fe4d3dedcff8bffd200c61aa38c95645c6e2a09bee565f2e0a33a487919430941fdcb984578a18f09397b3d5ef", 0x30}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) accept$alg(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000001c0)="08e83b2e6aa5cd45367f798fd827c7fdb54b7de1a7c433f9be0c5df6811843cdc17c52d819d54119fe4f58e6f7181d07b340d54cfaa8c00dd4ce212020d3a29c0cac86dfe1122b73bfee35870c472a176447e263cab26cafdac0a9b0db66163c5ca3427e6d2d21ab052e784780efa478da4b49055c9c8fd46ff776e8013c8e95f15ae0af581608b8d0615f79cce0bc37c2c89759aa66461a480548e6cbfaead43d1257a80228a24cc9dd478bd336664ba31dd4426c255c7ea1c3d25437", 0xbd, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000000c0)={r5}) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:06 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1068.933011][ T8074] __nla_validate_parse: 8 callbacks suppressed [ 1068.933040][ T8074] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 06:36:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a000007000000000000007d3da568c9a6e43eac14140000000000000000000000009388c0b491fdab12753de8effb7a2e00ac1e000100000000ee7e000000000000002300006869cada28d4b3c855aed2d8e2ee494ad9e7188aa25c3362211aeb01281e93f618173753015e22090f4bfec9992274bc113adad8928de069cd25df35fff21189d05f80f5c9155e57732807e06247651ebec84fea0f80e72666e49aa98159dd9f6f3c15a5909fab1d008e7825673da78595a92fa37e985a068852"], 0x38}}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) sendmsg$inet(r4, &(0x7f00000026c0)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x81e}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000002c0)="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", 0x1c5}], 0x1}, 0x0) listen(r4, 0x3) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$CAPI_GET_ERRCODE(r8, 0x80024321, &(0x7f00000004c0)) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000480)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000780)={r10, 0x70, "2f00e812e554d8fdb595f40ac122b26a09e2261c8b16033625fa0c9be4be7fbfcedb2f1066f5b7ed3dce5e4175bc78985a34e1444b8f73a669e77ce516fb931540e3786b57befd8a77958168ac1e6b61f22e34b37391b83f72df04e1a3c441eed5cfe3fb5ea1bc321b1c62bdc7a596d3"}, &(0x7f0000000140)=0x78) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000200)={r10, 0x5b, "ad3e336da92edbfd9ed00ba3d3aa0b107f00d2aedbfd29125141d7b1152b25ea09d921af907823293adeff24885daa77a7290ae49b6356243f0ff3afc20fe2ec746958f4ee2e8ed8978d3184d01b5ee0dbaf138e34f9ae7e098b72"}, &(0x7f0000000140)=0x63) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000280)={0x7, 0x9, 0x20b, 0x1, 0x5, 0x4, 0x80, 0x4, r11}, &(0x7f00000002c0)=0x20) [ 1069.071292][ T8074] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1069.161354][ C1] sd 0:0:1:0: [sg0] tag#6639 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1069.172144][ C1] sd 0:0:1:0: [sg0] tag#6639 CDB: Test Unit Ready [ 1069.178782][ C1] sd 0:0:1:0: [sg0] tag#6639 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.188685][ C1] sd 0:0:1:0: [sg0] tag#6639 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.198556][ C1] sd 0:0:1:0: [sg0] tag#6639 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.208533][ C1] sd 0:0:1:0: [sg0] tag#6639 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.218542][ C1] sd 0:0:1:0: [sg0] tag#6639 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.228397][ C1] sd 0:0:1:0: [sg0] tag#6639 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.238270][ C1] sd 0:0:1:0: [sg0] tag#6639 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.248144][ C1] sd 0:0:1:0: [sg0] tag#6639 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.257994][ C1] sd 0:0:1:0: [sg0] tag#6639 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.267846][ C1] sd 0:0:1:0: [sg0] tag#6639 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.277712][ C1] sd 0:0:1:0: [sg0] tag#6639 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.287581][ C1] sd 0:0:1:0: [sg0] tag#6639 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.297455][ C1] sd 0:0:1:0: [sg0] tag#6639 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.307323][ C1] sd 0:0:1:0: [sg0] tag#6639 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1069.317184][ C1] sd 0:0:1:0: [sg0] tag#6639 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:36:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={[], 0xfffc, 0x66d, 0x1b7f, 0x1f, 0x8, r3}) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 06:36:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000480)={{0x2, 0x0, @reserved="3340c5a502456d73a5694a3f685ef482f9cafcd43f174e4ba33aca2a11a948ee"}, 0x1000, [], "c4be650a5e14debfae42d7a6e40ce28386279216c40ae186b079d7b20d01c4fe875e8c0f0febcd129067917afd271001c5da1961268924c97e2e665048ba1d47a257b7136405c58d42750c5102755accb336b712d21036e6a8a569661c08486075612d746903f3bba6d36a582254dc4777d064735e76e08f8d2bab5e5ca88e0fc29400afd85491c448d15f6532d68245725fc300aeff06b718bb72b0d85f203e355aa0a3c908063eed2e74f88372c91c134875e3f8f68ebd908b1a8795520e9711ad60f525a335a101d6a1df746224ce75e55f71e8fddb2d063b3fad2440ae59b305a72f76100fa2dc7dcb71de22de41a697eff92315e86c925b460617659d1058fa80176ee15fb418621f70d909a8756229ba2fa9f19c092b37efb8bce8cddcff9ef978960001adda38ed43ad7a18628216d0ff662cde255608ae56c285a0f22ab842cf14cc4525b8d544f92fcd66669422a88c2cbd5d649d164b1522a13e41039ab6b729f1162235f7973ff9662b332e2fe79d58e1eaad8df9fae477654a3bf0922ac15dc6bf9478da0e4d714f599cb514a10a70140b914d3face4384828e2a0874ed71372df418d746a2896d6012e84278539c34812ba8e8062778c50a15e311c69a58c878f9c285754a4db04eff6c8552971097f57720828d41afc681ad528b3db409a7c2073261b50be6858a9508e5dc217deb301f172df7081eec3d678d488ed11ae8b65a9d12fad94c3c7199afe716d661d115046490255a7fc0c7d0748bbf7790a0dc5f2502e9bec0634400dbb3fee64cd2440278a1099aa77ed40bd65c88443a4cf761d8eb4fc31508c82753241078e724e966f36621d32ecb1842a25fa2c06a10a7c0ca675bd2f220424c46895b07bc20a78c69b0da9a540bd64b291ba3ef78826f37b151e73f70b876710160af4504b828f3dc2de2b57088e97fbf46d28061035a14d075a90af599214dc19589a21e8495988e7f7db8730df37768fb29cee3cb704b98df9d984cb6898182e958fc81c6d161dc8d3b5b14c6a14b28bc80402c69b439f44688e07f17fae8d34ebb48940a134392e98cb291d8996deab2f008b20e5f1ef20e6d8f4f4b7e0e9c1496be6083d48f534ecb743e7d15f2b485e66930953b3521deae2ca0a20daf2eca82cdf77e53bcb2d8fdbc02cb48ef412626f6475dcc61da5558277cc552fe65454c2a7598d3b0979d4ba1496ed9cda70b259756fd203afd256d3f73b9527e753e02ad5f73d14a844962d7918efe12363620e477bc3b852ff895157205820e7c961baa423674b4984c374357dac7a91c959d9081c90a8481306d85b246ef52c1e9cf954c36e9a3f63526fb25098d31877cf0fc412fe6c8f7f7e36d4ee5b1265a5774ff4d0276491b287dd50ea15a489ab5957ed8edb018ef8d7212601a606c9c62cd37416d12c90def14cc64f19624e1583c2c7fc20e2c1ad99c062ff1fb71b063068c4d4339f806f825d6545951612062aeef86d98da714c89909347d6c7278072d0701260c5bb7af104df3225f502a6c7e8c65c975861e67e4d4318d5051c51d57a4d1877ce38fd16d7713ba2ce036e42667132be360d3826697ddcb0889b4bde187687c0184cb227fecf03b99c70a24b5934e3bd2f64d6df8233ad59fc9d6251c6dc6bbceb42639833c844601685b04ea55f739985dafe80f5c4c2ff21acd3d0e74c57b300deaa3139c40da9981a274aa39a5f407a40b4218292b7755d3cae284ad1ce8bc4089c28247692530ea420e36ed81ac4a279af267fe8d85126ba939faaa26f1d18c46d232e29b598a2fb36ee32e3aab81e33eb6ea0a65964f67ba7afa4aa1155a8c9b98921f141379647cda21fa57bd8ec2d79490629cdddae45a796f20a6584b5a244023adcfd5b8952f08574960b56ff092309f9f65ee1b22aee5a51296891d187fab2a76bcdafb4b14b52609a330966ee1fd50acb281c8c8f4dda286eae7bb36bf9f069504e3bdbd0f9b27222c93a12363694f109efdeab8918cf2bd1191f885df3b1a0aee83c4d0fffd1b53cb931da9098e610001d74466ada73f5feedafa3feafb8958bb25fda915e2c46571e5a62d2357d2875593491ecfb51209bd873e8bfd7e19a9b819999c09fbc6fc69587ddc391ed7f44cfb23ad805db889240660e263d245cfd9552e3ef146da8c73318662bca467f5398aac5c0983043f65144f882865a21f03f2d7c6d4ab673b7a97de52748ef5d0f4c549d3bbe1d97efccdf6a9fb4569af13e7266599fff8381e66713ad7a66293c830425507fc3fa8b6738e7defb70cf490fc12fc7adb1214d494a527e21bb14a78a84cabae1b41635cdd28ad5707d3a50613f2e93ba3bd2960789ec00f48983b12716635c42c92285838ff58c283b74242ee4e151500196876972816fdb40f5b984ed589fe4791fcdb3876ad7a670574ba3eb78b5ac41e428bd24bddb251836713b3afa256f77a3cd1736a614fa334c2c2ef5a433375586045808d7be9f591548f47e36fc116699da8280c9415bc5b5c4a5e538eb26ab3afc2cc5400ca732e91efcb6feb7c0fbb9007a33f6115c040a8cfd31c5ec0a3bcba237cc85ada308edd9669c692b95958842426d8581506d66f0625bf8be1f2df6b2b46f5919c5343f7243652dfaf949a2f39ffe2b81d1a88fded525ff5b3fb2a7a444856cd24d9b1728ad063cd777515c33a3f2140b0742ac56df20cc985d0159920eb9ff031f77a6082e0f84d629ad46381bbc2c31022f66800cb06854e1b6602edb839919952131d305e00ecfaca22afe183af97b2282abc268389fa4f1441453d719768aadb13c8068307ac58fd5af93a4718fb6cb8e6884ac170af4d7e2996d07296cdda9ec3c3c0ada7fbc036226a023e166ca703f07fd84428d36cec7a2520c5d1162276bc5d239eb50135e1ca928accfc3f0c43cbd9b7ed6485de30653d75add062b8e857964c08e1dc03e2bd6a415208b5c8f3da36f73ff5c08e7055b1ec92030176fd0b235a29d33fd99a8c03618c296963e2231d4c526544167a210d50b052af6c750fc28899ae5978c82a8f8e93c07f22d6f8b56552a73878eea0805b088195dfb6552f9aa7c5c8ab6f5f026727859b459b969e57a946823d5ac2e2d9f2e6aa6972b6ce9843100e818db42c767c361948a656a419435a7bb81cdf074496bb81a37362a364733f38058087ae12562efe708e7019dbf96c33501616bb61c917184404f408f9b10734dbefa671dfcfdb694191d116a21eb2bd0be99ea8f12a450410b66f88bebdde172b0ed9555da7734b7d27eb768beb2a0fd544345664c69abe808faaef9d678fcb8d487d36a0e01f1015fdbb1a85964c15516c42f2eadedde2ab5a48698eeaafb6e6f81dfde9f93618cdc2594571bdb8959a9d4a4ecfc59ce3ec828412e8bc3dd143d21a28b09021687fad2dcf9594f87f0d35824e0c56fe9aafb1a48f1f2bf55091d172d4a73360a6acb6155b554a23a7bb8ada7a495cb921ee9992bac4aa78f626d78a0ce2ccab03b4f260a410e848d3f9abf80864cd395ae2fa18e1847d00c1e0ddd0093665e77c05de48d095613cb5181b29b899b25650e5eaef030ac446cece24899867348c274b4a6cf4c40036454041e2842a095174bb64af0164b2fbbd772e99803c90c2072c4b72960c48a82d3b7c4416d6f5101e2690eff1f9839772fd204d6e9d7db207777707f5b10e06cd49a6ef4db937bde9bed9b17bc82d921c5b83c65530f13b84f69bda10ada7be0c93611d3ec3bb0f589f8a1f8ce436beee87652fc50bcc049927b86c3bf05d321c11a90f8fd69102ea50d74369d87770fc61ba9fc3a0050cb78e89f89bcf14fc83d0e7835f76ba34d7a3a7d97f85388a0d42478e3bf672c61d1411a6ef0d39ee9f7047d4dacd356c0778b4b4f93dbf41b1ac243b869c354c6c31dbbf8e442bb589a0915e3b11c80bc7326b0dd3785b39e824672d80d02f4dabfc7c7946bc515674299117539b5ddee59a02090547e40ec7c3046e58f05022aa1b1208c844cf2eb3ca5625ee26f822757a9eeed7193b70bdadc31a667cf5e3809c96babbeb65c6e79913dbbf37a496060c6b7001a6b832e2ace018bf1d94910f7b8fe0638a8aea9e05fa3cc77f76055c3b561498de8bcee91b7cc67ae637068c808af0ab680e468432bbbb948ba68a9518d297f9937018cf549eefa07fe5b118d81bf1c900249cd268b4bd8aa27df7a811d6e377866ecbe37bfee57d58bcd30299fcfd5b3d4dce249a8c865e019356a2af98249f9b4b0b32618a70957aeeadebb4a6844a8e263e4ee72e7237dd8acffc2de66adeaa398c575b1376056e727eb87d57c6532dac02f572fed176ed99413c458f374de135477d4bb3adfa10465183d80aa619fd80b80863bb0cc32639bb15a433f38d4555811f91aa6f6c540e743843b36f844845f088d8d78ba418c356c97b8ba9b5802234851c12bc42e3b3dbd14079504401ecfd83248f7442c87f095c642a915516863851bc9f7a7958317d31a7bdfc20d176a90a555f839d6ff6452d2d607cfa3eff8143b4701a59024dadf21c20c84907aa3d626643eca8e82ddf6ff29997b9f69240e8562f09ee8bde02ee33fbe7912f347b5f44993da9286805628cb979d181fc3c5589ca51922a062c8e6b0bd414ecdd572ceb611a47267dc90eb2f8005cb1ff22aff986f2123cda425e86167229e3a6cd6d4eee72fccfa35a125056c74b9bb7a9453d013ad7e9a3b6654dec6e3477dfc4b7c5208e6b3f8c5dda489cf3e3d93f32543c9f4198f87295ece153b237b8faef31b0efd581346fc5a6934196d7df723e14fff6586bd3667f4345f4c25606d6a66e2633764790c2a965e3597e982810a4b08782e874a2eb19247e6cf2e614454a02b7e28da1718aa6f7c08685056c423456dd6fc5f0934386e1c3d82c585ff5e72a57802f520da843aa5d9c327ef14a8cea428ef2fa3d892d5affd2fd1234d12046e292e67954913a3e445884b61cee1d86dc0b0413d03ef495ed8d54d1efc8806f01455edd38a4ab4550f3056785059cbbbbcb118a2ce786a11ab4b100714ec18b54a701949024826425799df898bf8a496c245bcba992a5f41f4db1f49969dc43d1b35f3c6b405655fd628c098f7302263235c5f949ed680270ccd7721a177e2972aec71f23c86eb3c35c326c7145524a5526f543f3a31842fe59a4b483e267a103c17d35f51492b4d27d32b38b5e53e211c43d869de246817089636c18e029087b84461eae6df0bd6861fa384ba554dbad274ed1afe5b2faab201add5b5cdb0d2e5913dec3ea1cf27d6d9dbc8a847b033d13d30305d9799413bdd0345bfecda179b6c1cb6946d59185813813a87d32dce66d1c4ebad1c2d1fc3089563cb5f872e65fa8641a255c12066a7793d1710c34df2b9e612ae696b776294c0d11c26802ff986409b7fc47893aa26ea792b23727ba6e859d629312b6601d0abd3d041eced299cd8433bef532ad892f33e0c5bf660e2345894297ceb151c17768d6e6affd975c7cfc6712fc2afa712999714cb777a064c103f97616e4da458616034eb29128d823b4e75dc568a9c5a5306c2d3794a23ea966e9ab79e0a140b1aa8340061912902f7d02ebcc9f1e647d4c9b5b3455a7bd2d4e81444ae2112aa9b3332ae715cb82a87331759c464c3207ea5f8971db0376b4e745433d52e73fc3948320e2a136b36b63c5bf4f5ced9256084500bf5534623b74b6826b440e78775c58f27feacf640e8dc961c983588145e5a8710cc5d2ac504bb791172ffa32b2c789c89b63c"}) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r4, 0x7706, &(0x7f0000000300)) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000001c0)={0xa00000, 0xfff, 0xffff, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x990afc, 0x7c278007, [], @ptr=0x100}}) r6 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x4000, 0x106) fanotify_mark(r5, 0x10, 0x40000020, r6, &(0x7f00000002c0)='./file0\x00') clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x36}}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) ioctl(r7, 0x800, &(0x7f0000000240)="15712602327ab50180ffff5a85105df956ec2beb547e25ffffffbab6f008e2deddd2fa45738b8d699d3fdb406efbb819e91ff992d0ca3fae832dae35f91f961287bea4c5e684e1ec580000000000005ce863491203a69d") 06:36:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a000007000000000000000000000005001a00ac141400000000ac1e000100000000000000000000000000000000000000000000020000ab74e7144a1ddb00dafcc331a739c48392688f03997764b232dea2ed073db1c0ea8c093bab8eb74aeb3343f14121e3d8d52ed921845e96cc647644aff38ae87e0c9c9aa9c3005a106c341e3bca48e95c132ba8e0244e2a005bd726d7de92f5f0eaea5835524fbda203de7be5f3803776ac5520b6e5995f430d0dc5a24b2340f61f05e28adf346adb58f321cc10b5805058db02e27820c30ae41c1013e014a61cf7b393300c26c80140ed0a368fc3db4197c81ebcb9729dda69add21e48bf29c5de0e2b377e2b23ee9a9fb1049803f9e557e9fc8f156267"], 0x38}}, 0x0) 06:36:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x4000, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x9, 0xffffffff, 0x8, 0x0, 0x0, "041000806b13a4010000b400"}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat(r4, &(0x7f0000000100)='./file0\x00', 0x80, 0x40) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_pts(r7, 0x0) write(r8, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) 06:36:07 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') 06:36:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x6, 0x400000) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000000200)={0x80000001, "9b5319681df8dbcc6406ac8d18915c54fbc2e3b2c81cf8fb680a9fa4473821cb", 0x80, 0x0, 0x3f, 0x4, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f0000000000)=""/12}) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYRESDEC], 0x14}}, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000280)="0a3507dd916cbc32c7a47fbc2962e5b784f936d04c4c853440b01c72bdd9ad566d5479237b9bfa0b3bc08d68e63ac70a516c7304810d97aef2297ca426745051dcdd7e20a5") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="84000000000201040000000000000000000000003c0002802c00018014000300c21c062a396c4533d15423b10aa8c37014000400fe8000000000000000000000000000aa0c0200000000000000000000300003802c00018004000300fe880000000000000000000000000001140004000000000000000000000000000000000104000180"], 0x84}}, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup3(r7, r6, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r12 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r12, r11, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0xdb56) statx(r8, &(0x7f0000000140)='./file0\x00', 0x0, 0x40, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getgid() setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000400)={r5, r13, r14}, 0xc) [ 1070.269904][ C1] sd 0:0:1:0: [sg0] tag#6640 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1070.280611][ C1] sd 0:0:1:0: [sg0] tag#6640 CDB: Test Unit Ready [ 1070.287387][ C1] sd 0:0:1:0: [sg0] tag#6640 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1070.297242][ C1] sd 0:0:1:0: [sg0] tag#6640 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1070.303518][ T8117] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1070.307138][ C1] sd 0:0:1:0: [sg0] tag#6640 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1070.326098][ C1] sd 0:0:1:0: [sg0] tag#6640 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1070.335982][ C1] sd 0:0:1:0: [sg0] tag#6640 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1070.345838][ C1] sd 0:0:1:0: [sg0] tag#6640 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1070.355677][ C1] sd 0:0:1:0: [sg0] tag#6640 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1070.365531][ C1] sd 0:0:1:0: [sg0] tag#6640 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1070.375354][ C1] sd 0:0:1:0: [sg0] tag#6640 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1070.385204][ C1] sd 0:0:1:0: [sg0] tag#6640 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1070.395168][ C1] sd 0:0:1:0: [sg0] tag#6640 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1070.405117][ C1] sd 0:0:1:0: [sg0] tag#6640 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06:36:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) socket$kcm(0x29, 0x5, 0x0) [ 1070.414966][ C1] sd 0:0:1:0: [sg0] tag#6640 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1070.424786][ C1] sd 0:0:1:0: [sg0] tag#6640 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1070.434617][ C1] sd 0:0:1:0: [sg0] tag#6640 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:36:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/6, 0x6}, {&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000001c0)=""/241, 0xf1}, {&(0x7f00000002c0)=""/108, 0x6c}, {&(0x7f0000000340)=""/137, 0x89}, {&(0x7f0000000480)=""/41, 0x29}], 0x6) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/autofs\x00', 0x202002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) fcntl$setlease(r3, 0x400, 0x1) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000006c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000700)={'batadv0\x00', r4}) write$P9_RLCREATE(r1, &(0x7f0000000580)={0x18, 0xf, 0x2, {{0x0, 0x3, 0x5}, 0x7}}, 0x18) [ 1070.927818][ T8133] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 06:36:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x8, 0x80) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000001200)={0x44, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa46e}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4005096}, 0x880) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000012c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f00000013c0)={&(0x7f0000001280), 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x64, r4, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xef}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xbe1e}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) sendfile(0xffffffffffffffff, r3, &(0x7f0000000040)=0x3, 0x7) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) [ 1070.986248][ T8133] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 06:36:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000200)={0x3ff, 0x6}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r4, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) r5 = socket$inet(0xa, 0x801, 0x84) sendmsg$inet(r5, &(0x7f00000026c0)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x81e}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000002c0)="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", 0x1c5}], 0x1}, 0x0) listen(r5, 0x3) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000480)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000780)={r8, 0x70, "2f00e812e554d8fdb595f40ac122b26a09e2261c8b16033625fa0c9be4be7fbfcedb2f1066f5b7ed3dce5e4175bc78985a34e1444b8f73a669e77ce516fb931540e3786b57befd8a77958168ac1e6b61f22e34b37391b83f72df04e1a3c441eed5cfe3fb5ea1bc321b1c62bdc7a596d3"}, &(0x7f0000000140)=0x78) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000240)={r8, 0xff, 0xa, [0x800, 0x8001, 0x7, 0x0, 0x7, 0x20, 0x5, 0x30, 0x80, 0x7f]}, &(0x7f0000000280)=0x1c) r9 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xf, 0x18000) ioctl$IOC_PR_RELEASE(r9, 0x401070ca, &(0x7f0000000080)={0xa0, 0x400, 0x1}) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r10 = socket$inet(0xa, 0x801, 0x84) sendmsg$inet(r10, &(0x7f00000026c0)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x81e}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000002c0)="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", 0x1c5}], 0x1}, 0x0) listen(r10, 0x3) r11 = accept4(r10, 0x0, 0x0, 0x0) r12 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000000480)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r11, 0x84, 0x6d, &(0x7f0000000780)={r13, 0x70, "2f00e812e554d8fdb595f40ac122b26a09e2261c8b16033625fa0c9be4be7fbfcedb2f1066f5b7ed3dce5e4175bc78985a34e1444b8f73a669e77ce516fb931540e3786b57befd8a77958168ac1e6b61f22e34b37391b83f72df04e1a3c441eed5cfe3fb5ea1bc321b1c62bdc7a596d3"}, &(0x7f0000000140)=0x78) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f0000000100)={r13, 0x3b}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r14, 0x1}, 0x8) 06:36:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000140)=[{{&(0x7f0000000000)=@caif=@rfm={0x25, 0x1, "a8a13fd7eb94c929e6efad3eeab10e36"}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="5e2f348b1ca8959d1088d1c972a1d942ed03bf31ce14d248d6735f49402047a2543f16d67590181658ea9436d22df38f13852e01eb938e2527ce37b9504ceb85a25e6c2812d5f1a4e1d7c06db032fda62287cad6d87b9137d95878dba4d2ff24d71eebc170d1543abbafcc308a753f7936c93535775134f3c5bafcb69c12f86d", 0x80}, {&(0x7f0000000200)="930353cd6049f89141d436e392f7e13926e37d5f8f1cc00da22a8e570465e1de388a651b8c337ca0d84ac23059b55204a3237f86de06acd87e6d286a1776d41e137ef8311797ac34dfce2c1b309607ed4b060c6b002ebe635ea072b38e42aa0d8dabbe28119867f42193ef28f966aa999171c1d744cd5116f40f6e849c595906e62fff7c5f106016862df9d4bbe4228c891595666785", 0x96}], 0x2, &(0x7f0000000380)=[{0x28, 0x29, 0x10001, "6d988803c3ec78d7b82ab209ee1812d9be1a1d2b64f952"}, {0xa8, 0x110, 0x3, "dccf8c8608175feaf372acd88e18213e7c02b1582060aaf162617af0b8f156e24ecfa05da776c698553f679776aceec570cc025beefdb5a0116fc76093dfdf80e608a292572ef74396ac2a63df70b2d5a66673ce80e7d98da2080a705ca3f67d9422bb092de1038401f43586cce98977d4d204144a8354d55fcd219bc159fead8184838d36da4da4d4cbad9629d1e2de9db484b21e55fb08"}, {0x60, 0x115, 0x80000001, "d1b07be5cb370c9edd68b8b810ec545b5eab88c0f2e85b07d984fa0b5221864e7b84b7c2d13d581d4450603489ea282f44313bcdca708e1ffd14f87c6fadf18fa4afb83d742216e875"}, {0x10, 0x1, 0x20}, {0x38, 0x19a, 0x5, "88768e1e7e8f546d2b28aa0f45755332634daeb093308fc201c7ca42970fc0a54acb05af2cb5f7af"}, {0x28, 0x119, 0x2e5, "5b5beeb907adb8a058ee7edcd055afbfbf00"}, {0x78, 0x0, 0x80000000, "5778e08601937c4ef570c68d0852b8226fc26506db07a53844045d7a54c3b91d0a954472cfb51fb8a938219585a42dbf3b68ce00638a1bda70df88ba96b04ddc419a321d3e390eab1b955381a1d6155cc403c172b9699b3459e837168bb761dbc5"}, {0xc8, 0x3a, 0x1f, "92fb8ce1e5bc514f5be80d6968b9544a74c742ba15769a8afe42b7dfce4e644232f1634a02cdd510862f441f3444fa262dbe07ac07d56aac6e01463295d22cefd83e3fd95c808eb2e2226dbe55a538fbe36c991ba89424bbd4b1fff3f9889bd349244e6368b932bfda6e5f53455bfc397c03f6b7b91ace0a884a1ff6850b988259ca7bdb575782b68951e37d44266006ddc7c3c85c974d1877c1ce8c476c370676186cc3d26999775876ca1e96cd6e04cfea0e61d659dbb2"}], 0x2e0}}], 0x1, 0x48840) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x96f60ba188302d1f, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x2}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000300)={0x1c, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20020010}, 0x4004000) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) 06:36:08 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000ffff0000000000009820000000003b086803ffff633b27e59aa14417000000006d17c3f2c876c69901000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680814966ff9f2d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee09aa272c56100c796d74c92fad7e34bd5f0e4542636c2cb6222bc224649282af53ba5f496b75b8a42657e0c0a675cc276304f3c1955e3e18f161d21d606f2ef2a7ec42902015d553235041a8a08a6d0470d519f61067d7e38717e69aa37681e5711a657e80950afb00e24f3f9567a61f77f817eaaa7af8e75e847a57fb014eb65fc813258f995a0505f1baa5d318fdaee68ff2be4f913f5cc8e883f0900000000000000c5a8a00e5085b900"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x1, [{0x3f2}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1071.429618][ C1] sd 0:0:1:0: [sg0] tag#6641 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1071.440278][ C1] sd 0:0:1:0: [sg0] tag#6641 CDB: Test Unit Ready [ 1071.447081][ C1] sd 0:0:1:0: [sg0] tag#6641 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1071.456978][ C1] sd 0:0:1:0: [sg0] tag#6641 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1071.466883][ C1] sd 0:0:1:0: [sg0] tag#6641 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1071.476812][ C1] sd 0:0:1:0: [sg0] tag#6641 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1071.486696][ C1] sd 0:0:1:0: [sg0] tag#6641 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1071.496547][ C1] sd 0:0:1:0: [sg0] tag#6641 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1071.506394][ C1] sd 0:0:1:0: [sg0] tag#6641 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1071.516375][ C1] sd 0:0:1:0: [sg0] tag#6641 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1071.526468][ C1] sd 0:0:1:0: [sg0] tag#6641 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1071.536959][ C1] sd 0:0:1:0: [sg0] tag#6641 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1071.547032][ C1] sd 0:0:1:0: [sg0] tag#6641 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1071.556933][ C1] sd 0:0:1:0: [sg0] tag#6641 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1071.566779][ C1] sd 0:0:1:0: [sg0] tag#6641 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1071.576676][ C1] sd 0:0:1:0: [sg0] tag#6641 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1071.586543][ C1] sd 0:0:1:0: [sg0] tag#6641 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 1071.664822][ T8133] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 06:36:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) fcntl$notify(r2, 0x402, 0x80000005) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="020a1000070000000000000000f1ffff04001a00ac141400000000000000000000000000ac1e000100"/56], 0x38}}, 0x0) 06:36:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0xffffffff, 0x240000) recvfrom$inet(r1, &(0x7f0000000200)=""/172, 0xac, 0x61, &(0x7f0000000140)={0x2, 0x4e24, @multicast1}, 0x10) r2 = dup2(r0, r0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3c", 0x51}], 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a00000200000000000000eb6d813d"], 0x10}}, 0x0) [ 1071.709210][ T8153] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 06:36:08 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="003950320600000075"], 0x15) getresgid(&(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000200)) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x1) exit(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) 06:36:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x2, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x18) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 06:36:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000140)={'veth0_vlan\x00', 0x2}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="cfdddad7a350e463ea40b06b58206c3ae2cd48308bbd20ddde07e7d0ea41774e5af8ed84a0b26f1b9d31d7fbcfc2f3fa656d1952b1029d3c2eef0ca80e30aa4dbf23e9c3b79c851b1c695f1b604a49786aa12c109940b3257fbaf2bb227f6a15ca06b2aa5c3127f48c37aa4aba9a99e6cb6f64a088b9abc24d5e2b9a9a414550725b5d7f8258fb448001ec62ecfc1476a5f8bb5a397d9fcc1a50abcfb5e73340b04386f96a011697ab0811ed00fc3faa1839369efeb123de98ce51c1080fcfdcf116c2082a2fe13ff6f2c3a583dd2dbb8c529f06b7b84d5794d35ab1", 0xdc, 0x41, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @loopback, 0x10000}, 0x1c) 06:36:09 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x1, [{0x3f2}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1072.485792][ T8185] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1072.626894][ C0] sd 0:0:1:0: [sg0] tag#6642 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1072.637635][ C0] sd 0:0:1:0: [sg0] tag#6642 CDB: Test Unit Ready [ 1072.644486][ C0] sd 0:0:1:0: [sg0] tag#6642 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1072.654416][ C0] sd 0:0:1:0: [sg0] tag#6642 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1072.664353][ C0] sd 0:0:1:0: [sg0] tag#6642 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1072.674306][ C0] sd 0:0:1:0: [sg0] tag#6642 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1072.684219][ C0] sd 0:0:1:0: [sg0] tag#6642 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1072.694788][ C0] sd 0:0:1:0: [sg0] tag#6642 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1072.704710][ C0] sd 0:0:1:0: [sg0] tag#6642 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1072.714591][ C0] sd 0:0:1:0: [sg0] tag#6642 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1072.724727][ C0] sd 0:0:1:0: [sg0] tag#6642 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1072.734632][ C0] sd 0:0:1:0: [sg0] tag#6642 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1072.744584][ C0] sd 0:0:1:0: [sg0] tag#6642 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1072.754667][ C0] sd 0:0:1:0: [sg0] tag#6642 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1072.764658][ C0] sd 0:0:1:0: [sg0] tag#6642 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1072.774536][ C0] sd 0:0:1:0: [sg0] tag#6642 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1072.784403][ C0] sd 0:0:1:0: [sg0] tag#6642 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:36:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2cc00, 0x0) getdents(r1, &(0x7f00000000c0)=""/53, 0x35) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a00008c0100000000000009000000"], 0x10}}, 0x0) 06:36:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xf0, 0x7, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_USERDATA={0xc2, 0x7, 0x1, 0x0, "bd5ed62cc19bec14698bdb5f7245340dcf4949086175fd5837a0c2c6bb2b75a74b095fb294758afcefadfa542c8555f87275537b1c247df97afe17dc28c4e7d809c73a4dcb1be9c9a5af1b39413db454531c07cca2aa892606da643d49d9f1bbb6196b6af3b1ab4caf2afc3a8c6c328a0927e83a03a787a72bff01c8730ab2aaf82b2874ca99106fbba5ca93f583a472f5ce9b403a890dea90cb6cee01070b906da720a30add42b97bc56b52e1618f9f0d31e41844f7f6df1a0368cffde7"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x100000001) ioctl$TIOCCBRK(r3, 0x5428) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) [ 1073.104074][ T8202] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. 06:36:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r3, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000001240)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x24, r4, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000040)) 06:36:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) 06:36:10 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x1, [{0x3f2}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') 06:36:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext={0x0, 0x3f}, 0x20000, 0x0, 0x0, 0x0, 0x4000002}, r1, 0x0, 0xffffffffffffffff, 0xa) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1073.554270][ T8218] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1073.680469][ C0] sd 0:0:1:0: [sg0] tag#6643 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1073.691317][ C0] sd 0:0:1:0: [sg0] tag#6643 CDB: Test Unit Ready [ 1073.698185][ C0] sd 0:0:1:0: [sg0] tag#6643 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1073.708100][ C0] sd 0:0:1:0: [sg0] tag#6643 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1073.717968][ C0] sd 0:0:1:0: [sg0] tag#6643 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1073.727954][ C0] sd 0:0:1:0: [sg0] tag#6643 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1073.738017][ C0] sd 0:0:1:0: [sg0] tag#6643 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1073.747963][ C0] sd 0:0:1:0: [sg0] tag#6643 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1073.757872][ C0] sd 0:0:1:0: [sg0] tag#6643 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1073.767772][ C0] sd 0:0:1:0: [sg0] tag#6643 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1073.777662][ C0] sd 0:0:1:0: [sg0] tag#6643 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1073.787715][ C0] sd 0:0:1:0: [sg0] tag#6643 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1073.797622][ C0] sd 0:0:1:0: [sg0] tag#6643 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1073.807520][ C0] sd 0:0:1:0: [sg0] tag#6643 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1073.817529][ C0] sd 0:0:1:0: [sg0] tag#6643 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1073.827405][ C0] sd 0:0:1:0: [sg0] tag#6643 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1073.837291][ C0] sd 0:0:1:0: [sg0] tag#6643 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:36:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$setpipe(r1, 0x407, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) 06:36:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window={0x3, 0x3d}, @sack_perm, @timestamp, @window={0x3, 0x2, 0x4}, @sack_perm, @sack_perm, @timestamp, @mss={0x2, 0x4fa24c4}, @mss], 0xa) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in6=@ipv4={[], [], @loopback}, 0x21, 0x10, 0x14}]}, 0x38}}, 0x0) [ 1074.279851][ T8223] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 06:36:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x6}) r1 = syz_open_pts(r0, 0x1) write(r1, &(0x7f0000000040)="d5e2356718fb1080f984ac882d7ba9603f11ae875e5cd54e64c0a4a0656bc732cbda916e980ec267a49b58f13b2194359eb64914d44156eb072e6f518fa060b928b9ab1f060269f5274a0a76fbc21851751ad2ea9c103898457de43568", 0x5d) exit(0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4800, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f00000000c0)) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) 06:36:11 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x1, [{}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') 06:36:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000)='security.ima\x00', &(0x7f00000000c0)=@md5={0x1, "42f07ba056f25c4ccdd6eec3d7a714b3"}, 0x11, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x8) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r5, r5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r9, r9, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, 0x0) r11 = clone3(&(0x7f0000001680)={0x80801200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r12, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r12, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r5, r6, r9, r10, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r11, r12, 0x5}) r13 = gettid() process_vm_writev(r13, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r15 = gettid() process_vm_writev(r15, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) r16 = gettid() process_vm_writev(r16, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) r17 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002200)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) r19 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r19, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r20 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r20, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r21 = socket$inet6_dccp(0xa, 0x6, 0x0) r22 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r23 = ioctl$KVM_CREATE_VM(r22, 0xae01, 0x0) r24 = ioctl$KVM_CREATE_VCPU(r23, 0xae41, 0x0) r25 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r25, r24, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000025c0)={0x0, r25, 0x0, 0x2, &(0x7f0000000140)='\\\x00', 0xffffffffffffffff}, 0x30) r27 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r27, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r28 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r28, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r29 = fanotify_init(0x8, 0x101000) r30 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r30, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r31 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r31, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r32 = openat$uhid(0xffffffffffffff9c, &(0x7f0000002600)='/dev/uhid\x00', 0x802, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000002640)={0x5, 0x8, 0x1, 0x4000, 0xffffffffffffffff}) r34 = gettid() process_vm_writev(r34, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) r35 = socket$inet_tcp(0x2, 0x1, 0x0) r36 = fcntl$dupfd(r35, 0x0, r35) getsockopt$sock_cred(r36, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r37, r37, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r38) r39 = socket$inet_tcp(0x2, 0x1, 0x0) r40 = fcntl$dupfd(r39, 0x0, r39) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r41, r41, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r42, 0x0) r43 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r44 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r44, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r44, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r37, r38, r41, r42, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r43, r44, 0x5}) r45 = getegid() r46 = gettid() process_vm_writev(r46, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) stat(&(0x7f0000002680)='./file0\x00', &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r48 = socket$inet_tcp(0x2, 0x1, 0x0) r49 = fcntl$dupfd(r48, 0x0, r48) getsockopt$sock_cred(r49, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r50, r50, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r51) r52 = socket$inet_tcp(0x2, 0x1, 0x0) r53 = fcntl$dupfd(r52, 0x0, r52) getsockopt$sock_cred(r53, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r54, r54, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r55, 0x0) r56 = clone3(&(0x7f0000001680)={0x80801200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r57 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r57, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r57, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r50, r51, r54, r55, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r56, r57, 0x5}) r58 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280)='/dev/urandom\x00', 0x0, 0x0) r59 = fcntl$dupfd(r58, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(r59, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r60, r60, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r61) r62 = socket$inet_tcp(0x2, 0x1, 0x0) r63 = fcntl$dupfd(r62, 0x0, r62) getsockopt$sock_cred(r63, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r64, r64, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r65, 0x0) r66 = clone3(&(0x7f0000001680)={0x4001100, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0}, 0x50) r67 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r67, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r67, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r60, r61, r64, r65, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r66, r67, 0x5}) getgroups(0x4, &(0x7f0000000180)=[0xffffffffffffffff, r51, 0x0, r61]) r68 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r68, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r69 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000002740)='ns/time_for_children\x00') r70 = gettid() process_vm_writev(r70, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) r71 = gettid() process_vm_writev(r71, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) r72 = gettid() process_vm_writev(r72, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) clone3(&(0x7f0000002a80)={0x20000, &(0x7f0000002780), &(0x7f00000027c0), &(0x7f0000002800)=0x0, {0x27}, &(0x7f0000002840)=""/203, 0xcb, &(0x7f0000002940)=""/202, &(0x7f0000002a40)=[r70, r71, 0x0, 0xffffffffffffffff, r72], 0x5}, 0x50) r74 = socket$inet_tcp(0x2, 0x1, 0x0) r75 = fcntl$dupfd(r74, 0x0, r74) getsockopt$sock_cred(r75, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r76, r76, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r77) r78 = socket$inet_tcp(0x2, 0x1, 0x0) r79 = fcntl$dupfd(r78, 0x0, r78) getsockopt$sock_cred(r79, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r80, r80, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r81, 0x0) r82 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r83 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r83, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r83, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r76, r77, r80, r81, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r82, r83, 0x5}) r84 = socket$inet_tcp(0x2, 0x1, 0x0) r85 = fcntl$dupfd(r84, 0x0, r84) getsockopt$sock_cred(r85, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r86, r86, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r87) r88 = socket$inet_tcp(0x2, 0x1, 0x0) r89 = fcntl$dupfd(r88, 0x0, r88) getsockopt$sock_cred(r89, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r90, r90, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r91, 0x0) r92 = clone3(&(0x7f0000001680)={0x80801200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) r93 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r93, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r93, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r86, r87, r90, r91, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r92, r93, 0x5}) r94 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280)='/dev/urandom\x00', 0x0, 0x0) r95 = fcntl$dupfd(r94, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(r95, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r96, r96, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r97) r98 = socket$inet_tcp(0x2, 0x1, 0x0) r99 = fcntl$dupfd(r98, 0x0, r98) getsockopt$sock_cred(r99, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r100, r100, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r101, 0x0) r102 = clone3(&(0x7f0000001680)={0x4001100, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0}, 0x50) r103 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r103, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r103, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r96, r97, r100, r101, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r102, r103, 0x5}) getgroups(0x4, &(0x7f0000000180)=[0xffffffffffffffff, r87, 0x0, r97]) r104 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r104, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r105 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r105, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r106 = socket$xdp(0x2c, 0x3, 0x0) r107 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r108 = socket$inet6_tcp(0xa, 0x1, 0x0) r109 = dup3(r108, r107, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r109, 0x8912, 0x400200) r110 = openat(r109, &(0x7f0000002b00)='./file0\x00', 0x701482, 0x81) r111 = gettid() process_vm_writev(r111, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002b40)={{{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000002c40)=0xe8) r113 = getgid() sendmsg$netlink(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000000)={0x14, 0x39, 0x10, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x4, 0x32}]}, 0x14}, {&(0x7f0000000200)={0x14f8, 0x35, 0x300, 0x70bd27, 0x25dfdbfc, "", [@generic="22540b073b2856ac0ea9f51e1fa32488dd62611a5dc8e7921aea65fd78c8d2704880e5749297543c8bd89514c657e2be710a", @nested={0x34b, 0x75, 0x0, 0x1, [@generic="d1a76f693dc5bce1562ad146cc2772a43ea366e5ebee51d7a822c031f8cfd0a48db97651a41d5264c845bad9bb27efa1dd6dc02847b46c3af8a41e6e2f263d78909bcc73dcae408239069eb7dc6192f16e4069f82ea04d52d00332e088018041215f42c1f9d6a60ef3a3a725fea6fe2b69fefaa9eefcef0c27008f57000e3d3bbe291e33fbc0311140ca56937c98c084f34dd00bf8856b920ade3e063b6d2581f9463f5b22e6ba9ca4d67921b619100843912df932efe93b6dc1fb163a596e9e1b6eb0544445771dc9613ef4377eb14d48abca60e244fa20a27131f9d675", @typed={0xee, 0x30, 0x0, 0x0, @binary="734c2f8abbcadd9cd9a879d7016aae0dba73ec0e80e7ac277092dcf475cef499c3af190c086dab4ce7bc1256baaee1bc607b5ec0d3b15904cc920a5014e409c068ac86847a6baeae0158969896e9b6dad9d0564c3fbb7af66b3a26fe871241a6e0629840b91b0514184af82998e9ab437d09d2b0fc311c846e5dbac21077de1f2ba96c7443ea62c66140482f86b04939e3b3944dd257cb165026858c06ffe309c811e52e875a0f29d9333eaf2108aa5e4a318719a1fb1a21ab7b099bdd9d918f0d51e3478ec4a87b34913acdd4e9ceb6cc0ef2f68f6c497bda2e511300f533313d8f0796b88a83370623"}, @typed={0x14, 0x43, 0x0, 0x0, @ipv6=@rand_addr="15fb9ee846fbe3c88763017c8728e6fb"}, @typed={0x8, 0x4fa, 0x0, 0x0, @pid=r2}, @generic="20e451cc6e69f3508ccda9b2d9256e28c93051369188d4f254bf7fd41c493c5c0931f337ca0750bea4164694d40fa72685388f100ef0a695a9b551a6b55fc0754719bf3e8b029d2738ef3768a2f86e5ed878f9e8ab8d814a795753ecf0442ba59827ea", @typed={0x8, 0x56, 0x0, 0x0, @fd=r1}, @generic="2a695b457c9542bb738d58a5ad130a62252555fd62362307be699f74aa2f3ba6a907e864407a54918115da8b72ce21af1f5cc06bbc85463cfc232de7665adb2537f573b565817be10244451b3d06e13ccea9933329ec5cab7e8f87ee1706ac0fb8c4be3e75dce050aa147625e0f72df4c81d5e9f6d0fb8a26e1d29bad10fd2bbde45684b49c5d2cc550aacf9ee7fc49f49cb31a0fa643070083504426631d8a2626aeb48df4731907b4c984c0c3c8e57a5b018843eaa3370eddcd14aa2ebb0", @typed={0x8, 0x2c, 0x0, 0x0, @uid=r9}, @generic="488d4b89dc14d37588b1fcd7e9d7fe19a7199808c786f2b9dfaf", @generic="b6f409952eb5aec033c44e3809399965f7"]}, @typed={0x8, 0x3f, 0x0, 0x0, @pid=r13}, @typed={0x8, 0x4f, 0x0, 0x0, @ipv4=@local}, @typed={0x5, 0x28, 0x0, 0x0, @str='\x00'}, @nested={0x1058, 0x95, 0x0, 0x1, [@generic="f5bf2917b7bde55ab00d0b607f6cdde9e61b56ac", @generic="b0aa5e097a11d0fb02f0750f237eea58d499d0bc433b0888bc90fed4574edc6ae02690fd71935ec9ff8c61bf4fa93ca19d6547a40c49c666a95503ed7678d54a1ea56865a017590beda81bfdd1ceb61a3055db07d742690319a27738c4c31c75b5ba0375befe6adb06cde334d76b489f7f7c684e827ee5bece8a6d1207899b744981880c2f7fd6555945016f269f402f419adb98aa1008a026f8393c47a593a204a9fa0de848aca7c224cb556345610e49f70edeeda81855e79f7bfeee41065801773a27e364f2259f300ca12e8ae4f586a3cf320b200a33fc0af6190a034e9af1953bdcc2a9de8c3d9f6b9456bb5e9f14e87b910160c2dae417b20a99d9918f135f0c175d23d2768f711c6fcf15479a28f00ee63fb548344dae9b985ab12ea961f4c27ff45728fbd27a19dcde101c1d63117e8638ebd0129663afae306cf43e954122cc6ee686876dbf9234326a8ba9f2bdaf603a25d41a57c2b4b0880fd93e7c6b0d8b7975c824e6287aee58da1553d3fedabaaa4fb01f14a8a6e09ea9431e57293fd98cca3958d15f9bcb29a59aabc1295fb0b7d3f2a4820b52fc5e8e441f9390edaad9dd93d20b2d969f04c9e7d98dde556b7f6632d2d2ff7cf36e524bc3a685b8abbbdf7ceb31433a4590172a2227f1f5bf3683e497b3435efcc494fdf805a2b24da64941bd25250a17828049451b09093614eb0e500e33ef4db2ce5570c8c4ee581d065f5a8dd0300de6cbcaa27539093947df8a60f490d735d6d74da05fc8cdddf3b504888c3dd3be2446f97615d13de64ca8eb8b12869962b524fe3c3b33966f8c13c9e407568cc665ee514fefa24c834bdbc36f6e88153ee5fe2a3c5351c72a720a20d70bccd1d72e7267add74d2750c781fe84b4e5fcd23d3445f57964fb4b4e0918b0ab7667f589da4be1839fcd4c235331e2aed44d1143feefb951298e00c811dfdf4d9d0824ca15a974746f98c4ed43e1ac7583665a63213e9c9391541369ea4139a0b633545eb7f2ca400fd43b2aa09e4b759f5641ce2c8b73a4affd253e0dd83eddb4b2849c05c43e93e03a5c5eafe967b55f6252bd15224eee1516f27ec093d175d988529213dd9e68d6a2dc00365b47fa08cf1e4fec23cc1ab060ed9d39042a91003205c0baccd4432ffad9fdfde901938257ddc173e1eb0b50aeff902b35282a7e1bf01d14c31325b6c497cf4eedaefcb96126a0f77d64aefbbaa9a61e5153e18af8e5542d99522c613806dfba3e6d86a6642c885d1cc9a29acc1ca8f07dd0ffcdc1dae25951a806f8ea34371e1baf135b2498617e19e022a66b3c32aadb9ea24109807ccfa7e276018ac9259d2b36a1014e9033a35426df81fa123ab567c7d5f072be347874119a6e4cff631a0956e14696d2fea2d64af380e8600563f96faa116a7fe668d74d9d0360b5f930b15a492fb01113e02457cf808b133af182f5944bff671ba4efb02d43819658b19365d1f2ccf7a5ddd7832320825dbb7d218d8a344d60357a0e4bbd106f977082d1b86deffdf69abdb3d277f57da1223fba0f279d9ad95d0bb8fdf51586c2eb9f7c435b1acbcdbe72858cd7130fe29e2ea97a7f2cc747f16b99f39db8340188317f45e4b9c0cfbca1cdf81bfa3e2bbce443cbab5965897382d3319ae08118c5937c8f56982f77ffe1958ddc9d677747010323069f218a86b3cd08836e29b717f61a4927b780ef7fa60bfb333d2bfcd34674360372d87d039a512c7307d2c293383a1bacd1c2aff3796eee7696ba9a097ccab4cc493c1fad498359e9c1cc0bb43646a844f822ae7dd62228772c0428c6d90ffff852537b27bd5598c7674578561b9df879faa56289594082428157eb809aea331b05472baf97a81793f75cacfe59c8972ce0751c8dc1eeb2fbbb35aea548c0ae6c1f749afc5efc47b2b152db510ca7706f89f057ee805aa6120c0705837e71f11ce46d5ee19b11ed6279ef1019f975a3834f4b17331537b4a4fea5d23b8d5b114616bf808a8976102816d33c28a6e5d64e033627fd546dde8148df1244fabca70d72884d8bc3f4ba44a13436c635afffdd67c5c28204187c033d18d0d5694afbd31f9dd41c18f9375d6b440ab712b4fadd679f60db1f64f3c640247bb2110939e96eaca509452275e760caf1b9252cdd0ff1e19e9ec629a60055feffb58fd5e8ea4e789f7d25b8982901f52ac5f10fb10047e3861e7be33519c1797f2ebee372e8ebb9dadbfe6bdbf18e80bb0589f1cb7ab2d745cd85e19c977b58610ff8c973a897605c85650f8bb65b702fde57a20add1d31887b20b6cbc73dc58dccd3023cbc6ef10bfbdd3087ea94a260b617e442e4e9dc123cb91f350ee5d7ab8e3a8700d7d1b081914160f5c4139616550c45c801440d593e3d5bed06a5b8f57ce3b50c74e8dc9333b55162f4080bcbb1c03e18c1d93f47c0104fcbce5484d2646fb02f2ba5aeb62e1cf8b634383ea10155ae2eb493ee5a76e91115329c9600eefadd605343f112e3ae51ffd34759e90f2ea060d219e5ac869fd3ff124ed812f3bc48327d317c68526cceac15290c16f5cfd8fca06a3df8468920ecd655fec97039281324d8c5e7216fa7563cec830db868da8f44ab9bac544aede171ac298938cf3ebd15b7d2848f51dfcb5d64870d9856a10d6ccb46dd32a78e86b8ba833608ee569b5d31985845d0b87d320db61ca86acc7b3762d17a643c607209427f22faa14b00472b148caae4d0b22d6a91d60557d2b4e14dee3d437ff45cb0f9c13b5e16bab2e875de09b73a850e9f58800902235324966440cb138d5c646efb0e8f4923b15afd2e3821e3d1feb245be659dccda13337f77bce1cb66d09cb5da0b792f5c66f545741478e3ecf9392b05d8bfa6d4d12c638a6aee66508dd347b3599de4cbd5aed25a66716f7a5a18a047849e47a2bb269942f4fe6d6ae8d2e92efae17f40cbac1c3d3e59103fc17d581a5fb5db2533067ac339a00786636d966167361ec2a2c3fef150a4f277bfd4423c9ee2af64ac4eaff655704bb9f8df205c633d9c6d3e8b5ce46ac302eb40b787ade44828189f56e241b8b7d42805d23fac8de4da8cddb566f03cac78d01852018afe84abeb6cc5b21f71e2118b80682e86cca1cececa7a4b41a973a3520baab82129a092012198d019fe59296e054d4c64e54ddc045f1093876f3ca9441547f8105bc4a62d659643da4174da02070c971c69f3d853daeb052ff84d232c5b94b04cf060857524673953cd52b63fda00dee3fb55a25ce14615401d9da4b8b281db537f0b5d22e4978812a22681bf46286c2519e90ef7d2e7cb48f9221a65211d0b28cffb362d6f80400a97b5422155f319ef1a4eb0b98587496cd51c4e588537b5f04b7664bf2274dce39dd643c576d1221a4f919ff79629802b5fa7dc1a650d092c72590d756adef599ddb04d23d7160d86765582502bc32fa728da267b7f42bfc2ba464cb41c2260019d90f765b289fe2b143654e9a9817c84a40034f057decdb69364f76fdc3646911edb1b31d9c3653b57318fe89c7eca6872432ae2eb385a02808eb8a98096726402d47809b71e8a78325665f12dadc15866eb59abb5347729f36f4aaa07bb38f36d3bcd17890c8e72884f7640280cdd185d858d3b4e79585fedfd78f68177aa550b312b011d217deae3c82e0e7de2c6c03385f880718be6d1c2e6c3212b515e882ac588eb02d7f816a2ff579c23b4f454837ba13c5b80f8f2aec12382e6e911b35a3c6ddc2bcdeb0f8d2f423a6df5cf43540c519ddd1718a7b996335a1e306c742acc12c5ec4f3b030ef199d921861c34f2edf00ea02f316c3b527ab657a68768472f608ae916a326f8d808ee781a13b1a68f07b63af4c69c0dc39a00385978d2f4efba2cd0773b30f32fd236fb381bb05521c65ce9617049847f4a2f3f7ebf8220466c2fb52ae4e7e65b1b965ee687af117ba5905cb9a889fcde42d2b7dfcc323a7877da14e4ba43cac13d152553fde267108ed8c2412db7121a5097d9f826db7187f392889add3eadca02d70614ff1a91b47640491632d9af8af594a4c0bc07340d88ff8c09a850c59b399e0d308157d64df2e47fb223e87727747b045c08c2a739bb7c3c3964f348501e04c8fb292f51fff5205d07216a1bea5127d2f607716ad6cc97c64a3c3290c78e0642e9796697453234e2f8780bfe441f08596190b3e9350f4501ba1e4cbbec0c003ea0135c859687e5c19f06ee9d5d982b6254feb087ea557e885c0f152dacba312ab885d87ad1091f39daa3ad8901a43c14f1d2f861a2449e72f6e7e79e07d076f36e26e85d47c1ec7174ed9f2d321037b8bfe8243f08e1571a5ae4bcbf50c8eb54346471336e69ceb9e19a4da8c2311a4b6be51cbd8241679b277d85e9a203ec16a361981f9c69dfcbe39c5ecd6673826e797802ef0abe2d5ed48e642f157c2342661823f28eb93d3404329bbf0f45415a4623ee93a3657bf00d24ab37ed689c88e1746547347509f5959951f1c0479f7c735035617c011241dbf104324af9cf0998b63bf763563d23ad1cff1954e9b958a172a32c2030340bda0e1a0a56e142bd4eb6142f8b726ac6faadcd0dde6ef2ea50546e99f272b3b3adaf931de0970620329853bdd9883395a103c8ac6107d962972dafa48c96f66f75ddb19f22dac6c33126c5e652b1e5cea462233a19bd281d7ad76d17bed1ab03159be67836218852cc708fb447be1b4ce1f6f17f5a510044cd065960ed9a3945f4118e7d7bf82c53671c3b3d84de2ac80c71010533d1436bd62681df8ccb1f0ab0ca82bae9fcd169f528897d959a1ae6075d8b4371e734030f99539b6a68cd21ef48fc5dfd256b9457288afe227c27bc1dc537c688854195aebce6ec3bc7fea3d3d4471bf3984eb47b8ee2ead7bc4a2873b4a08e28df9d8fc5a0eb497f62e346ccfee19a53f2f6ead9f848f11e04afe72fc386427fd1e69fc5105d4eea07aea42beef51d2ce237ed147fa56d8e13d0bad417ca7d6f0769fc28a302298a704e7dd1d394903a6749c2dbfec4f4d7c178eee881dcf6bf2b342754e50ffaf698b3a0ecf01d0f4619fbc830d75c049fa4934a0a033843106184dd507df7790ac646785bf6249e3a8b7cb9c9a5812a6a0dd413e9a19b8f22b80d1e25607ede81235120b0f41009d6aac5b192be84c8a1783c93f74ff8b5ca20b590511a68915eecb575cac31ddb0b5d3c686780cdc1043821aebc3df0bf8f1870d67a73e60d408a184f39a2aed9ca759be5f647dc82561a93e13f32a2ad8e7506c72d7e7deca9051b1fb7d8e4b50b4b2104a8e8937902bc97e77968bef1e0944d3d0ec78cec569af4bd0bdbfa74aa1c5ac7142b5892c3f3fd443e7cdfb665cc5faa3e49e1226ea154acabd84a15773e1102b2639a6580c794fc9ad1ede979f4c0ea357e2ae4250ccd53fd028c32d802e883dd68149b6d615eae4db9fefc7e39044c1c9e704f77525741f99d2119db1682b675a33bd0013d5be77b24a385a513ed14e6794a0dc0607d4af19b41bd6ae87b3e44ea46d08f67f1f583d32e29c7fec73f88ffd642994c7c512edec72fd652728200e1ceb0507a39966bbc43772d0ca10a6fc0e1ba5c3d7d15c04aba6bb7bc6bd8f2b5b06aec6a5224c03ba8e2ab0de0720b7726684e752543acc1ec8baa60dffbf0b7fb1287c3ec227c421c559d3f4f309dfb84fde1d0de863075c5bc164b29a46599c6ae687e57128242a283f9ecb10884fa17935ac196d0188598d34eb381db382034b9dfb9cac8604c6773f415ced7a29dac1ac8630e60fa", @generic="dc70df99e37d6f49e9d5f3fc1683440b04bea1ae943bb6ffa31b058a9c43d72adfb52618ccc20bfe62470c2b58c41b91204512aa5a78ccc54150bb2dbb10b4de"]}, @nested={0x20, 0x59, 0x0, 0x1, [@generic, @generic="cf2354e53d694307dde5a1e37543c2c6", @typed={0xc, 0x35, 0x0, 0x0, @u64=0x3}]}, @nested={0xd2, 0x4a, 0x0, 0x1, [@typed={0x8, 0x4a, 0x0, 0x0, @u32=0x40}, @typed={0x5, 0x48, 0x0, 0x0, @str='\x00'}, @generic="72308f3fc7e18b081d92a577b7ab60f1311558495aff3d39b6e6991e28b2daa7b6b16abd8835037e9ac3203555d48721a4174ba6063880ce91b5311c6cf895d1a750607d6daeeda3d603ba332749547aae59b60dddbefad881a1440172bf161977c03517afd75f4b87c9b96d4bd429aded616f6ac6e3de92fed711f7ef275e86b5d9ecce7af2a06044067cf93cf63e606562ade47aa0b7f4b804a3d992d03247c50ef5de4d8dd64d55fea9fa2ed2adda0b473d8f932e9c8d4b6857006a02"]}, @nested={0x4, 0x72}]}, 0x14f8}, {&(0x7f0000001700)={0x4dc, 0x1f, 0x4, 0x70bd28, 0x25dfdbfb, "", [@nested={0x1d5, 0x68, 0x0, 0x1, [@typed={0xb, 0x8c, 0x0, 0x0, @str='cgroup\x00'}, @generic="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", @generic="1193f902e4d56e267262bcab66a05c19aeb9bc3dcf424bc62c767cb807aae4329e1d3164a839e1e1eb6cbd7f31c6cd6135cea714f6fac0930763dded4a1819d09bbf5bb0b1eb", @generic="edfa44d1fb8ebe5f12dba139394b386c5e3eaa56ecf0c3f40fa6f13e795966c3afaec8d1da6104eee2e54d795ac5f82130cc68fcfe50aa9c32e44a0cb8a2e55e2d2e565312cca6475ee68c86ac80b76b2e5e2f17df5f7433fdc6999d6a26724f937325be0ceb209905dfd6e4c116c9207a6ae606fc2400013fb5beff4c9fa82df37d6a56fb"]}, @typed={0xc, 0x8, 0x0, 0x0, @u64=0x1f}, @generic="763ac288891b264eb78c6d6a2fd2d8d38ac5cc61fb7f8de1f927fee4799ce1b0ca74020de5e649697346149e11fefcd307c3a65f62b55b7358f5f4fd4c1b6a85de25e14d61f244f6753b08a91e1a1f78bade471cb5c8d352b03586924acf3906b4a6a58d060f8933c65b1bc9b404204fb4094e17c71194c305096505591e57f5e980be3f3d3852083323ec1dc85db010206c6b4acc498301a57fd42d002e1aa25d713d8b474a931b153d3528291ff58b6ccdfcad14c09fe2f8a199", @generic="61658e899f2d34f94102482ef76479db4ec1edd58cc7182815d0db62afde33a591e42c78890d", @generic="9ced78228f76c44cbccd6025d04bc6c2a5471161ea49b77864caba0a492422a4b3a547b2f75ada9b7dd50fc058ef4d5090ce0b91d981fd7a77dc75288871a2312a1941f868cd4f3b93f788fdb9945e4e6b021615c2011627a053beed9496f523ffc6e58e630cc93140e5b9cb82d3f8b5195f3c9148b1c05c1f3626fb791dc075a552ecb4f4a14dbfa1c085fdf8a9d3f584df0d6caec2b7e8f6bedb7bb1d47378351f1fb81fc297ed9a41b0ad35bbf63ffcec66c2094f2d06e9f10257d8074c7a4acf06b4a2d514241462f079a0683595ab35e5d9f583dad0e05d0452eaa759929b70b601abdffc5f9ab1", @generic="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", @typed={0x8, 0x2, 0x0, 0x0, @fd=r14}, @typed={0x14, 0x47, 0x0, 0x0, @ipv6=@loopback}]}, 0x4dc}, {&(0x7f0000000040)={0x18, 0x2f, 0x400, 0x70bd29, 0x25dfdbfe, "", [@typed={0x8, 0x12, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x76}}]}, 0x18}, {&(0x7f0000000080)={0x34, 0x2a, 0x400, 0x70bd25, 0x25dfdbfb, "", [@generic="ddbb6aa19248972c24d32728674cac193fc3eb42834b70d1bde039638bb87b317265"]}, 0x34}, {&(0x7f0000001c00)={0x44c, 0x18, 0x300, 0x70bd2b, 0x25dfdbfd, "", [@nested={0xf9, 0xf, 0x0, 0x1, [@generic="8b0c710e5c8431a775f6208b9074aab85eb10def53e04c8cb8d80408daa8672719c69abba4cf8a19f56e64039ca9b6f8c20e710cb886eda0dd0696eace4b975e6db4ff6e6f0af9142b6b190aab2b33b617dcabaad0962767b5a8a777bacd1102768dcddb87778b32701a439c1ea232a586229addf173f31543122d1c4b121d62387c533484f1decbb16161ff2ad8782b41dce01c5c9541956747e0b87b0bd2d0ca6be5e80b98fcb07cb4efcb1dde177bbe8736e13823a20268ac72adc7c9fc6368eec547b593be634f59acb6c62de56c83c3cd5c77261c506df205a18efc026bd979b7fd3a93c19ef883d95b57f14aa6f38c1d1316"]}, @nested={0x193, 0x83, 0x0, 0x1, [@typed={0xc, 0x89, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0x44, 0x0, 0x0, @pid=r15}, @generic="7633972bc90b30d9096437c178c2be8ed088f4ce0052961d313d87f4f273f3b053b9371254cf47c9c6f7ed9723db4ddfcb7f19f608984dd8b2f7b882eda7c72a9525925cdb9927c33ef71e3b956142873eed93487e84d54fdaf546fb0ee192c21ebe7891e7680bdedcd4ca9856b4d27012ae33ce94f01163f4e01924295a7186ff8f65613aae2a56dcd99d9009253bbb138ac87b53017582364b4ea3d6d43e7907e8fd2bb7062ca572b87d3ee9e276e98b7f257586c93be00dab", @typed={0xa9, 0x25, 0x0, 0x0, @binary="b90cf484b18d4a9f5e5d5e1aa63ad10ff86accc39047c7782b81922138530ac7099538b0afe0144ed83c8027171f3663b8fc0cb672c48b4f3ae78ce22335bea349c55038b884f914f4879f1ca367f5841e16bcb68a7c5d4437d65401e2397e10a34a2cb82d46307926b4fd51b92e6f46910e0f53c4c07c6d39235a0067cebbef5ef1f8420814a05c222228b19afcbc6b33f6d98723a97dfa9ccfe76789d5ba0c5676221f86"}, @generic="e0ba06d407e5c335fb5f224eb3872ee61658d79614"]}, @generic="7f09d7480e2760885dccd5fde6f4ddc3d767b387957a75138d1e7db415562a9dbfed178775b46e3b7fee0043de943e4ea4299aa95488be04f750b132dcd1780541960cac167cd4ab0afab9acd1ab7069894f2180c9ce5b5aa2d124a2cfe05119fe5bf2f1cd38866923c62d9cc413125155b87bb06db6d6d3e4a168e8887aabe1168be77ebd97bdd7faeb45072e1a3c4c12b793cf7769a4dea5ae4a1c9f4fddfdd47010c459c5209439", @generic="f7f9068daca1b1adcb0e81af3df2e1d821d8cc2f80a410b8a25d0f7d0b1038492609a40fe631a5dc985c48c5c5c79c0d003ebee5213fb82a9f6f5b58d50da373a760a67b22c80ed67ccf17cc5aa34eae892de8f645290066f9662f4edf2f62ac1ee782ff9727d101dd34babd64f6f3983bde13185939a93bc6830dbe9211f4cc8e0b9c25aca080daa5332c0023e7fadf1fb35fd7a558fc0abb02bc8c98e7621527bceb9d2e9c0793aca6e136e6b9250f89ab490072ae8adc945496d6ada447a6d91a2ef4efd3996bf9b636b2212af3d20e7d91503a372e643cecdc4b5aaddd48f6341b16ff9f1e5dc7", @typed={0x14, 0x27, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, [], 0x3b}}, @typed={0x4, 0x5}]}, 0x44c}, {&(0x7f0000002080)={0x14c, 0x1f, 0x1, 0x70bd25, 0x25dfdbfc, "", [@generic="92ce2155d58881de8d9d24dab845f83cc43d4ae3de58c38abb1b2a58160c2b82a8da687957cf2cd5a7d7f4487c0b2836fd8712ecb15e014dee65647f4d5b666035ea3e3d205aee26fb235bb94afab37830772897edcd205f879112f50891a25058c8cae98716ec153af140d2c995bb603a000708ab2fda7fd5ad8a2c86e22013d952a16c5452dea3666ba605e416bb0d2e3f02bcb60b04666e206826362056096824f52b585dfd03b8ede2075a0e1f68f1b5a0226dd2674dcb357ad4e183edfaf1d39c0ce0", @nested={0x72, 0x5f, 0x0, 0x1, [@generic="b53661c9e5fc4931d60cf1ddc0467845481241e8f73149950068f2bfdb6cfb3bf189df3df3acf82fd356354be8aab712597bde77683974b2e365394a34589d8cba665d04a3be2b9f54b8aa30ae9d1b69ec94007ea8a0878f8c3b1d6fd24b17", @generic="634ec933625479a5f6481aaae53b79"]}, @generic]}, 0x14c}, {&(0x7f0000002300)={0x218, 0x32, 0x200, 0x70bd26, 0x25dfdbfd, "", [@typed={0xc, 0x12, 0x0, 0x0, @u64=0x1}, @typed={0x4, 0x58}, @typed={0x8, 0x4b, 0x0, 0x0, @pid=r16}, @nested={0x12c, 0x27, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @fd=r17}, @generic="5e936512b547b7556ffb8312e606ed23e1", @generic="ed65d188d1b9a6f3f57441beb3d86888a281f5d0eb5e7f7fffd2d3639a9ba9f3f63192be8c4aa9bc65c5115a36c205513566812d1226e76fb8c5e78b97336173c9471b3e6957c90256b3a6c9ca4fc8c919894b212cf1b54fd081f6836c5ea2a96d03a941fdf8715edc4d891512d1978294b30f511ee045380446bd06a91ff6a38ed9d28526e17261181bf80e7608d996d423d7455fbe07c3d376e556049a4cdfffd7d251d1ced1f4148f13975129a2be766db73ad1fb9365cece4b57de07bd88cf4a79a06400e8b5bf00434493dad9117e8589c1840dff73dce1f7a1ce3ba5b76fa98e6fc3df1f3c3cef2ee42fab831d9fb88b94cf1c26d0553578", @typed={0xc, 0x73, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0x81, 0x0, 0x0, @uid=r18}]}, @generic="b5db13ad1f7ccedc13c3d5b72e0480de95069362eb847dd4fd0d2b3e894a49c87161c69330df8e624a9af3ecb6d2c0ec78514950ef9430ed9bfb60ab42baf0cbfa6ce39885aa4ff84d7e4bd6eb75bdfbb66cddbbb01ec835d77734e013a3aeeb9dc218c301bf3f8acad9308b1feb446fe8709adefdf85e3b63108439082c27fbae2e38b6183fd3dc9193969d701bf227398bb3db7824b9af60af0257986d667af64001175549e943464b898fde1c7535b5319f1e1d390e10513541b0", @typed={0x5, 0x13, 0x0, 0x0, @str='\x00'}]}, 0x218}], 0x8, &(0x7f0000002c80)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r19, r20, r21, r26, r27, r0, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [r28, r1, 0xffffffffffffffff, r29, r30, r31, r32, 0xffffffffffffffff, r33, r1]}}, @cred={{0x1c, 0x1, 0x2, {r34, r41, r45}}}, @cred={{0x1c, 0x1, 0x2, {r46, r47, r61}}}, @rights={{0x20, 0x1, 0x1, [r1, r68, r69, r0]}}, @cred={{0x1c, 0x1, 0x2, {r73, r80, r87}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r104, r105]}}, @rights={{0x24, 0x1, 0x1, [r1, r106, r110, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r111, r112, r113}}}], 0x150}, 0x40810) r114 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r114, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 1074.759050][ C1] sd 0:0:1:0: [sg0] tag#6644 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1074.769716][ C1] sd 0:0:1:0: [sg0] tag#6644 CDB: Test Unit Ready [ 1074.776637][ C1] sd 0:0:1:0: [sg0] tag#6644 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1074.786529][ C1] sd 0:0:1:0: [sg0] tag#6644 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1074.796596][ C1] sd 0:0:1:0: [sg0] tag#6644 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1074.806569][ C1] sd 0:0:1:0: [sg0] tag#6644 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1074.817124][ C1] sd 0:0:1:0: [sg0] tag#6644 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1074.827072][ C1] sd 0:0:1:0: [sg0] tag#6644 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1074.836945][ C1] sd 0:0:1:0: [sg0] tag#6644 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1074.847596][ C1] sd 0:0:1:0: [sg0] tag#6644 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1074.857474][ C1] sd 0:0:1:0: [sg0] tag#6644 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1074.867360][ C1] sd 0:0:1:0: [sg0] tag#6644 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1074.877438][ C1] sd 0:0:1:0: [sg0] tag#6644 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1074.887307][ C1] sd 0:0:1:0: [sg0] tag#6644 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1074.897316][ C1] sd 0:0:1:0: [sg0] tag#6644 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1074.907183][ C1] sd 0:0:1:0: [sg0] tag#6644 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1074.917061][ C1] sd 0:0:1:0: [sg0] tag#6644 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:36:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a000007000000200000ccb7f70556550f0e2c74d36d745d8a000000004d2736b19b0b4de063ac530b3fd4dc000000000000000c000020a47b2d79e6ace51eb21b0e146febedd34483e28f4ca276955a0ab3862dec3e"], 0x38}}, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) sendmsg$inet(r3, &(0x7f00000026c0)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x81e}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000002c0)="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", 0x1c5}], 0x1}, 0x0) listen(r3, 0x3) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000480)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000780)={r6, 0x70, "2f00e812e554d8fdb595f40ac122b26a09e2261c8b16033625fa0c9be4be7fbfcedb2f1066f5b7ed3dce5e4175bc78985a34e1444b8f73a669e77ce516fb931540e3786b57befd8a77958168ac1e6b61f22e34b37391b83f72df04e1a3c441eed5cfe3fb5ea1bc321b1c62bdc7a596d3"}, &(0x7f0000000140)=0x78) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r6, 0x3}, 0x8) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000000)) 06:36:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_PCM_IOCTL_XRUN(r1, 0x4148, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a000007000000000000000000000005001a0008907066000000000000000000004572e2b74ef230610000ac1e000300"/64], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 06:36:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000000)) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1075.657108][ T8276] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 06:36:12 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x1, [{}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') 06:36:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x80900, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000080)={{0x2, 0x0, @descriptor="f16aa0abbecc9a17"}}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x1) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001200)=""/4082, 0xff2}], 0x1) [ 1075.744189][ T8276] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 06:36:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r3, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000280)={0x6, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x199040, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x6, 0x7fffffff, 0x10000, 0x400, 0x7fffffff, 0x7, 0xa, 0x2, 0x33e, 0x0], 0xa, 0x800, r4, r5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r7, 0xf2b, 0x0, 0x0, {}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, r7, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0x2c, 0x22, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9bb1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffffc}]}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x100}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x60000}, 0x4000) [ 1075.868882][ C0] sd 0:0:1:0: [sg0] tag#6645 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1075.879593][ C0] sd 0:0:1:0: [sg0] tag#6645 CDB: Test Unit Ready [ 1075.881477][ T8276] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1075.886410][ C0] sd 0:0:1:0: [sg0] tag#6645 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1075.886522][ C0] sd 0:0:1:0: [sg0] tag#6645 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1075.886636][ C0] sd 0:0:1:0: [sg0] tag#6645 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1075.886737][ C0] sd 0:0:1:0: [sg0] tag#6645 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1075.935487][ C0] sd 0:0:1:0: [sg0] tag#6645 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1075.945435][ C0] sd 0:0:1:0: [sg0] tag#6645 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1075.955509][ C0] sd 0:0:1:0: [sg0] tag#6645 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1075.965463][ C0] sd 0:0:1:0: [sg0] tag#6645 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1075.975424][ C0] sd 0:0:1:0: [sg0] tag#6645 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1075.981904][ T8291] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1075.985338][ C0] sd 0:0:1:0: [sg0] tag#6645 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1076.004553][ C0] sd 0:0:1:0: [sg0] tag#6645 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1076.014550][ C0] sd 0:0:1:0: [sg0] tag#6645 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1076.024567][ C0] sd 0:0:1:0: [sg0] tag#6645 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1076.034468][ C0] sd 0:0:1:0: [sg0] tag#6645 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1076.044615][ C0] sd 0:0:1:0: [sg0] tag#6645 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 1076.083831][ T8270] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 06:36:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0252220a0000070eeb000000000005001a00ac2d14000000feffffff000000010000ac1e00fa00006b1f55fa14946ddd1000"], 0x38}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r3, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x0, 0xbb1, 0xf0000000, 0xf82}, 0x14) 06:36:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="90010000", @ANYRES16=r5, @ANYBLOB="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"], 0x190}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000000)={0x56, 0x3, 0x6, {0x2400, 0x4}, {0xd9b7, 0x7}, @ramp={0x3, 0x3, {0xdc, 0x4, 0xfffe, 0x33}}}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r3, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000001240)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x24, r4, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000040)) [ 1076.685415][ T8305] debugfs: Directory '8305-5' with parent 'kvm' already present! 06:36:13 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x1, [{}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1076.862628][ T8256] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1076.921438][ C0] sd 0:0:1:0: [sg0] tag#6646 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1076.932309][ C0] sd 0:0:1:0: [sg0] tag#6646 CDB: Test Unit Ready [ 1076.939019][ C0] sd 0:0:1:0: [sg0] tag#6646 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1076.949004][ C0] sd 0:0:1:0: [sg0] tag#6646 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1076.949570][ T8321] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. 06:36:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) readv(r2, &(0x7f0000000140), 0x51) [ 1076.959671][ C0] sd 0:0:1:0: [sg0] tag#6646 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1076.959775][ C0] sd 0:0:1:0: [sg0] tag#6646 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1076.989620][ C0] sd 0:0:1:0: [sg0] tag#6646 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1076.999563][ C0] sd 0:0:1:0: [sg0] tag#6646 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1077.009519][ C0] sd 0:0:1:0: [sg0] tag#6646 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1077.019641][ C0] sd 0:0:1:0: [sg0] tag#6646 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1077.024524][ T8270] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1077.029811][ C0] sd 0:0:1:0: [sg0] tag#6646 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1077.049188][ C0] sd 0:0:1:0: [sg0] tag#6646 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1077.059294][ C0] sd 0:0:1:0: [sg0] tag#6646 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1077.069279][ C0] sd 0:0:1:0: [sg0] tag#6646 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1077.079272][ C0] sd 0:0:1:0: [sg0] tag#6646 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1077.089263][ C0] sd 0:0:1:0: [sg0] tag#6646 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1077.099136][ C0] sd 0:0:1:0: [sg0] tag#6646 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 1077.160932][ T8270] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 06:36:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 06:36:16 executing program 2: r0 = add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f00000001c0)="53da818d577a3906e1a8e9bb2f6f13d9fa6d57fee6da96013993e507d1289f7621f7121197af848132058ac88799c2a4f77f237cf26e63a53ddda6ec87f3d47dd732b1c9bc24a04cc861640db9861bdc2bd03215b239af5ed322ad6cfed72c3aa0bd408b7f4881705e8b0906f1864b8c5d4396a7afb89ce4889b19ad27cc89d74e2041", 0x83, 0xfffffffffffffffd) keyctl$update(0x2, r0, &(0x7f0000000280)="1e09b33222449a162eb36e93d07e8bf9a4a2edf2bdbeddfdaadfb422a26c5c5933de346966ab004f9eb59db7bd09c3dec22a89b43efa7c8f828b5e485cf55103c92b288c6d0329968b834e738cd92f2b", 0x50) socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r2 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/exec\x00', 0x2, 0x0) pread64(r2, &(0x7f0000000300)=""/224, 0xe0, 0x3f000000000) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl(r1, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext={0x0, 0x3f}, 0x20000, 0x0, 0x0, 0x0, 0x4000002}, r1, 0x0, 0xffffffffffffffff, 0xa) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:16 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1079.567778][ C1] sd 0:0:1:0: [sg0] tag#6647 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1079.578512][ C1] sd 0:0:1:0: [sg0] tag#6647 CDB: Test Unit Ready [ 1079.585306][ C1] sd 0:0:1:0: [sg0] tag#6647 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1079.595203][ C1] sd 0:0:1:0: [sg0] tag#6647 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1079.605229][ C1] sd 0:0:1:0: [sg0] tag#6647 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1079.615120][ C1] sd 0:0:1:0: [sg0] tag#6647 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1079.625013][ C1] sd 0:0:1:0: [sg0] tag#6647 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1079.634992][ C1] sd 0:0:1:0: [sg0] tag#6647 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1079.644884][ C1] sd 0:0:1:0: [sg0] tag#6647 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1079.654742][ C1] sd 0:0:1:0: [sg0] tag#6647 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1079.665325][ C1] sd 0:0:1:0: [sg0] tag#6647 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1079.675188][ C1] sd 0:0:1:0: [sg0] tag#6647 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1079.685055][ C1] sd 0:0:1:0: [sg0] tag#6647 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1079.695203][ C1] sd 0:0:1:0: [sg0] tag#6647 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1079.705078][ C1] sd 0:0:1:0: [sg0] tag#6647 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1079.715270][ C1] sd 0:0:1:0: [sg0] tag#6647 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1079.725128][ C1] sd 0:0:1:0: [sg0] tag#6647 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:36:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext={0x0, 0x3f}, 0x20000, 0x0, 0x0, 0x0, 0x4000002}, r1, 0x0, 0xffffffffffffffff, 0xa) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="8400000000020104000000000000000000000000440002802c00018014000300c21c062a396c4533d15423b10aa8edb9a2fcd322950900000000000000000000000000aa0c0002800500010000000000300003802c00018004000300fe8800000000000000000000000000070632701b3919ba0114000400"/132], 0x84}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r2, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x118, r3, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5b6d86f0}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x569}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff8000}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x10000}, 0x8000) write$binfmt_misc(r1, &(0x7f0000000000)={'syz0', "3cc9594e1f192b63d2ed4ffa7626800b05df14b513c53219facd9b54c0069fa13ac6dd1a231590b0877420b104edbf573d8b7b209b3808f80d9e3810ef20a1773c4b84de45a4b33fe05c9f16cab0059ea19f163ccf0ee0ac2d2644cd77ec6cdd47a129f2492897bec34f184e271aade19891ec292001b7"}, 0x7b) r4 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="020a0000020000000000002d00000000d24ead7f6f72b8f70547426b9c3c6664ddd2164988b4e6083dd152287ff39cf5a3002e388219799f81e4204c7b75b6414b"], 0x10}}, 0x0) 06:36:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000000)={0x9, 0x4, 0x8, 0x0, 0x6, 0x454}) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f00000000c0)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) [ 1080.120606][ T8370] __nla_validate_parse: 5 callbacks suppressed [ 1080.120643][ T8370] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 06:36:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext={0x0, 0x3f}, 0x20000, 0x0, 0x0, 0x0, 0x4000002}, r1, 0x0, 0xffffffffffffffff, 0xa) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:17 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000ffff0000000000009820000000003b086803ffff633b27e59aa14417000000006d17c3f2c876c69901000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680814966ff9f2d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee09aa272c56100c796d74c92fad7e34bd5f0e4542636c2cb6222bc224649282af53ba5f496b75b8a42657e0c0a675cc276304f3c1955e3e18f161d21d606f2ef2a7ec42902015d553235041a8a08a6d0470d519f61067d7e38717e69aa37681e5711a657e80950afb00e24f3f9567a61f77f817eaaa7af8e75e847a57fb014eb65fc813258f995a0505f1baa5d318fdaee68ff2be4f913f5cc8e883f0900000000000000c5a8a00e5085b900"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1080.637602][ C0] sd 0:0:1:0: [sg0] tag#6648 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1080.648437][ C0] sd 0:0:1:0: [sg0] tag#6648 CDB: Test Unit Ready [ 1080.655351][ C0] sd 0:0:1:0: [sg0] tag#6648 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1080.665341][ C0] sd 0:0:1:0: [sg0] tag#6648 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1080.675377][ C0] sd 0:0:1:0: [sg0] tag#6648 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1080.685336][ C0] sd 0:0:1:0: [sg0] tag#6648 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1080.695304][ C0] sd 0:0:1:0: [sg0] tag#6648 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1080.705238][ C0] sd 0:0:1:0: [sg0] tag#6648 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1080.715154][ C0] sd 0:0:1:0: [sg0] tag#6648 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1080.725042][ C0] sd 0:0:1:0: [sg0] tag#6648 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1080.735051][ C0] sd 0:0:1:0: [sg0] tag#6648 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1080.745011][ C0] sd 0:0:1:0: [sg0] tag#6648 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1080.754908][ C0] sd 0:0:1:0: [sg0] tag#6648 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1080.764800][ C0] sd 0:0:1:0: [sg0] tag#6648 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1080.774857][ C0] sd 0:0:1:0: [sg0] tag#6648 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06:36:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000280)={0x6, 0xa, 0x4, 0xe000, 0xde75, {0x0, 0x2710}, {0x4, 0x1, 0x2f, 0x6, 0x7d, 0x80, "a116d89b"}, 0x800, 0x1, @offset=0x3, 0x9db, 0x0, r4}) getsockname$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000300)=0x1c) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x0, &(0x7f0000ffc000/0x4000)=nil) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84000000000201040000000000000000000000003c0002802c00018014000300c21c062a396c4533d15423b10aa8c37014000400fe8000000000000000000000000000aa0c0002800500010000000000300003802c00018004000300fe88000000000000000000000000000114400400000000000000000000000000000000010400018006158b8efb64438ed95e9679771366"], 0x84}}, 0x0) fdatasync(r6) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1080.784740][ C0] sd 0:0:1:0: [sg0] tag#6648 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1080.794712][ C0] sd 0:0:1:0: [sg0] tag#6648 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:36:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @dev={0xfe, 0x80, [], 0x22}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000480)={r4, r5/1000+30000}, 0x10) r6 = fcntl$dupfd(r1, 0x406, r2) sendmsg$nl_generic(r6, &(0x7f0000000300)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0xa4, 0x16, 0x10, 0x70bd2a, 0x25dfdbfd, {0x20}, [@generic="9629a7f1b35dd137dad6fbd52488cffd3cb67219468a1ca6a5694bbbb7bc4368ee467bf3af8439caa5a44bd75fa46a266129070125aa28bc0b11776022bb1cdb97b9eb138fd2dd72cdbc06dbe37fc8bee14335701eb792211ec8722467197a38", @generic="0377821f84ca65b744b9e224dfdf863c3a87b927185db94b0c86f4300300"/45]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c805) r7 = socket$key(0xf, 0x3, 0x2) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup3(r10, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) write$USERIO_CMD_REGISTER(r11, &(0x7f0000000200), 0x2) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000280)={'hsr0\x00', &(0x7f0000000240)=@ethtool_ringparam={0x10, 0x5, 0x9, 0x224, 0x5, 0x6, 0x8, 0x4, 0x6}}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup3(r12, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r13, 0xc0205649, &(0x7f0000000080)={0xa10000, 0x5, 0x2, r0, 0x0, &(0x7f0000000040)={0x9b090d, 0x40, [], @string=&(0x7f0000000000)=0x1}}) ioctl$KVM_GET_ONE_REG(r14, 0x4010aeab, &(0x7f0000000100)={0x1000, 0x1}) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a000002000000000000000000fd60"], 0x10}}, 0x0) 06:36:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext={0x0, 0x3f}, 0x20000, 0x0, 0x0, 0x0, 0x4000002}, r1, 0x0, 0xffffffffffffffff, 0xa) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1081.040544][ T8397] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1081.103188][ T8397] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 06:36:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext={0x0, 0x3f}, 0x20000, 0x0, 0x0, 0x0, 0x4000002}, r1, 0x0, 0xffffffffffffffff, 0xa) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RWALK(r4, &(0x7f0000000000)={0x7e, 0x6f, 0x1, {0x9, [{0x4, 0x3, 0x1}, {0x80, 0x2, 0x8}, {0x40, 0x3}, {0x1, 0x4, 0x7}, {0x4, 0x2, 0x6}, {0x8, 0x0, 0x2}, {0x80, 0x4}, {0x40, 0x4, 0x2}, {0x4, 0x4, 0x6}]}}, 0x7e) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 06:36:18 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x220600, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="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"], 0x20}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r13, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r13, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {}, {0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r16, @ANYBLOB="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"], 0x20}}, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000140)={@empty, 0x0}, &(0x7f0000000180)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@mcast1, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) accept4(r1, &(0x7f0000000900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000980)=0x80, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) r23 = socket$nl_route(0x10, 0x3, 0x0) r24 = socket$netlink(0x10, 0x3, 0x0) r25 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r25, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r25, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r24, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r26, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r23, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r26, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r26, {}, {}, {0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) r27 = socket$nl_route(0x10, 0x3, 0x0) r28 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r28, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r27, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r29, @ANYBLOB="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"], 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000b00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80020008}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x100, r5, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_LINKMODES_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @ETHTOOL_A_LINKMODES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r26}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r29}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x100}}, 0xc00d0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) 06:36:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x92, &(0x7f0000000000)="4f2f8ae24f9488489161f28268c782c35084da717f8feecf1b97", 0x1a) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext={0x0, 0x3f}, 0x20000, 0x0, 0x0, 0x0, 0x4000002}, r1, 0x0, 0xffffffffffffffff, 0xa) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:18 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') 06:36:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r3, 0x40044145, &(0x7f0000000000)=0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 1081.878577][ C1] sd 0:0:1:0: [sg0] tag#6649 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1081.890268][ C1] sd 0:0:1:0: [sg0] tag#6649 CDB: Test Unit Ready [ 1081.899835][ C1] sd 0:0:1:0: [sg0] tag#6649 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1081.909704][ C1] sd 0:0:1:0: [sg0] tag#6649 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1081.919655][ C1] sd 0:0:1:0: [sg0] tag#6649 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1081.929591][ C1] sd 0:0:1:0: [sg0] tag#6649 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1081.939549][ C1] sd 0:0:1:0: [sg0] tag#6649 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1081.949504][ C1] sd 0:0:1:0: [sg0] tag#6649 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1081.959502][ C1] sd 0:0:1:0: [sg0] tag#6649 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1081.969374][ C1] sd 0:0:1:0: [sg0] tag#6649 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1081.979339][ C1] sd 0:0:1:0: [sg0] tag#6649 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1081.989208][ C1] sd 0:0:1:0: [sg0] tag#6649 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1081.999077][ C1] sd 0:0:1:0: [sg0] tag#6649 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1082.008937][ C1] sd 0:0:1:0: [sg0] tag#6649 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1082.018786][ C1] sd 0:0:1:0: [sg0] tag#6649 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06:36:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext={0x0, 0x3f}, 0x20000, 0x0, 0x0, 0x0, 0x4000002}, r1, 0x0, 0xffffffffffffffff, 0xa) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1082.028668][ C1] sd 0:0:1:0: [sg0] tag#6649 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1082.038514][ C1] sd 0:0:1:0: [sg0] tag#6649 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:36:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400202) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a00000200000000000000000000005c17dca7891e8ceb8887bab58e468d8189c663edb212979d224597ed0c79a2440fce9d306c430ac4dee685e186fceb1d4272af"], 0x10}}, 0x0) 06:36:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) getpgid(0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f00000000c0)={0x81, 0xfffffffffffffc01, 0x1}) 06:36:19 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000ffff0000000000009820000000003b086803ffff633b27e59aa14417000000006d17c3f2c876c69901000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680814966ff9f2d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee09aa272c56100c796d74c92fad7e34bd5f0e4542636c2cb6222bc224649282af53ba5f496b75b8a42657e0c0a675cc276304f3c1955e3e18f161d21d606f2ef2a7ec42902015d553235041a8a08a6d0470d519f61067d7e38717e69aa37681e5711a657e80950afb00e24f3f9567a61f77f817eaaa7af8e75e847a57fb014eb65fc813258f995a0505f1baa5d318fdaee68ff2be4f913f5cc8e883f0900000000000000c5a8a00e5085b900"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') 06:36:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r3, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x0, 0x9, 0x9, 0x3c, 0x0, 0x70bd2b, 0x25dfdbff, [@sadb_spirange={0x2, 0x10, 0x1, 0x4d4}, @sadb_x_sec_ctx={0x1d, 0x18, 0x8, 0x9, 0xdf, "aa3c3af2b20456ee4d4ab354bc88278a67970505fd269947cd7229f16e1cb45bb644133555ea4635a67403c3bfe919f749078f276c1746fdeda38547eb14c74f97a9647a53e165a855c02af1ba3845ecf911020c5c2bfcc7a241ac5d1dd540a35c2885da71c4024c849ae66079e2ae5422a788f0c27862b05e4ab3b109470cf4eac3f79ba7d5282116012619a729ac4b88053e1518b4d098549904042ad7a712bab7c5fd98fb8c1d945be4adda54b12e59d3d3c57d592bf13d518d9ecac6b65ac6156f367bd0bbd8af64e3aed8f734a2cb906a67f9f251300e43227d274f27"}, @sadb_sa={0x2, 0x1, 0x4d6, 0x4, 0xc4, 0xad, 0x2, 0x80000000}, @sadb_lifetime={0x4, 0x3, 0xfffffeff, 0xfffffffffffff849, 0x8001, 0x7}, @sadb_ident={0x2, 0xb, 0x8, 0x0, 0x100}, @sadb_x_policy={0x8, 0x12, 0x4, 0x4, 0x0, 0x6e6bbc, 0x0, {0x6, 0x33, 0x2, 0x81, 0x0, 0x7, 0x0, @in6=@remote, @in6=@loopback}}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d3}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d5}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0xfe0, @remote, 0x40000}}]}, 0x1e0}}, 0x20000000) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 06:36:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) getpgid(0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1083.037632][ C0] sd 0:0:1:0: [sg0] tag#6650 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1083.048367][ C0] sd 0:0:1:0: [sg0] tag#6650 CDB: Test Unit Ready [ 1083.055202][ C0] sd 0:0:1:0: [sg0] tag#6650 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1083.065138][ C0] sd 0:0:1:0: [sg0] tag#6650 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1083.075201][ C0] sd 0:0:1:0: [sg0] tag#6650 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1083.085180][ C0] sd 0:0:1:0: [sg0] tag#6650 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1083.095143][ C0] sd 0:0:1:0: [sg0] tag#6650 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1083.105044][ C0] sd 0:0:1:0: [sg0] tag#6650 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1083.114996][ C0] sd 0:0:1:0: [sg0] tag#6650 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1083.125029][ C0] sd 0:0:1:0: [sg0] tag#6650 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1083.135042][ C0] sd 0:0:1:0: [sg0] tag#6650 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1083.144956][ C0] sd 0:0:1:0: [sg0] tag#6650 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1083.154920][ C0] sd 0:0:1:0: [sg0] tag#6650 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1083.164857][ C0] sd 0:0:1:0: [sg0] tag#6650 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1083.174929][ C0] sd 0:0:1:0: [sg0] tag#6650 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1083.184819][ C0] sd 0:0:1:0: [sg0] tag#6650 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1083.194903][ C0] sd 0:0:1:0: [sg0] tag#6650 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:36:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = dup3(0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$6lowpan_enable(r4, &(0x7f0000000180)='1', 0x1) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) stat(0x0, &(0x7f0000000080)) setreuid(0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffc, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) setreuid(0x0, 0x0) getpid() io_setup(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000005c0)=[0x0]) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@local, @in6=@initdev}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000000680)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) setregid(r5, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000480)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="08000300", @ANYBLOB='\b\x00A', @ANYRES32, @ANYBLOB, @ANYBLOB="080004", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="200d09ca62efcfa29b7ad5f61fe037154d595241ca5254c99b005a41dadf1fe9256d9a2aa2edfc00f806eb3713ba123049e7190bc6525a3f2108000000e6fafa8ea6d71142e07ba105f8423b7162c0f0b1ac7a42005aea80d4edf54a481a669390871e08368c8edbdeb7a2f4125d30752b474f146a48f751", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0xee01, @ANYBLOB], 0x12, 0x2) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 06:36:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) getpgid(0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xfffffffffffff555, 0x1, 0x0, r8}) socket$key(0xf, 0x3, 0x2) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r9, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x84}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) r13 = socket(0x6, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r13, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) setsockopt$IP_VS_SO_SET_ZERO(r13, 0x0, 0x48f, &(0x7f0000000000)={0x1d, @dev={0xac, 0x14, 0x14, 0x15}, 0x4e20, 0x4, 'wlc\x00', 0x12, 0x7, 0x49}, 0x2c) sendmsg$IPCTNL_MSG_EXP_NEW(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0xdc, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_TUPLE={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, [], 0x36}}}}]}]}, 0xdc}}, 0x0) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x54, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x54}}, 0x0) sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYPTR=&(0x7f0000000340)=ANY=[@ANYRESHEX=r10, @ANYRES16=r3, @ANYRES16=r11, @ANYRESOCT, @ANYBLOB="8b546fa6e6bb8c1fa0c5761bbd77fbd1a282dba5ad2cb781a4d7b05c7e441be52fdb24b9dbb869f978fcfd90101fd3eb98d24576e5d6bfd2a2a9e21bd2d924eb78b7427f3603bfd334be835e2db849926563c773d85b64e854570b769a85a95248f270bd3e04a7bcd7fa9d9229df4538706b535671f5cf276bcbb63851526add7a7444b87ce651a81da019ea6d87b78a0663d0ae195370e12294d32c6e33c148f87e12721a4b32d0fdfd86eab6da953929901ad63578446751ba720065e4d56cc371953c6c882a8b58206a552bc26a454e211b9c0f7af8cb"], @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB="224c3e3e20ff14bb4adf43f81e7bfa509d574001b474b140b4fdf5c34b206db62690710c6be5a4ab6ae974a8b1c29bd9c735edc8ab632b596e0d4a771effad21051026ec2bcf1f08f53f5e90660d517652f62486e36e4e8fc57d7af91948b40644b127b8f03909d2703a9a4e7d54d3e4285415910b52a7e5cd3cf9d2b88aa66488446b383d9423868c5dddedc9b55aca0658c8dfe80d9fbb3f38d4c84ea0446527f06bc026c102c6eccb", @ANYBLOB="969e7892ddf66859278ac40ea6313e2da56f9dde598f8847932c3f0013cdf76265b46fbc827d44a7f9a5a7afbfa63191f8e0fc2f19ad0ef1d37c3513aced45a898635c324a101cfc3774c33734cebe073a737519d55258786eab2d94e6f615b3a3b870295eef05bb760e50b845b06ab3fb495f576c8f13240028fc2e9fb32e0b8434c22394eea270a344a227e0af532011fcb93ae351712dfbc45057b4549989710bafcfdbf7e7beda0ce42b2643a2a37b42fbc95320bcc1db9602404911263ba432457a", @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYBLOB="2c399c7aaa380cab6f7dc3bb", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESHEX, @ANYPTR, @ANYBLOB="3a6b0dd13ffae17d82baa1769833"], @ANYRES64, @ANYRES64=r12, @ANYBLOB="3a3e6ce6d2f9cd01f7d7e50ca280c5a5a0d8fc32e11b63b132cb67ea4f881af1964961079881dcad23ac456166918edfd37d0b38b71dd5f754512d0d78a922", @ANYRES32, @ANYRESDEC=r14, @ANYRESOCT, @ANYBLOB="c827725613730aab6e6af580b5244a86"], @ANYRESDEC, @ANYRES16=r11, @ANYRESDEC=r15], 0x3a}}, 0x0) 06:36:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x541601) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x8, 0xfd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fff, 0x0, @perf_config_ext={0xffffffffffffff9a, 0x3}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x7) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) r1 = clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_PPC_GET_PVINFO(r6, 0x4080aea1, &(0x7f0000000240)=""/222) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r7, 0x8010550e, &(0x7f00000000c0)={0x1, &(0x7f0000000000)="370b599898273374fd7cca44546fd62563f770c252d908b37cde4ed8da2781e129528ca9da6fdb0a46"}) fcntl$setown(r7, 0x8, r1) ioctl$KVM_PPC_GET_SMMU_INFO(r6, 0x8250aea6, &(0x7f0000000340)) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1083.963418][ T8483] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 06:36:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext={0x0, 0x3f}, 0x20000, 0x0, 0x0, 0x0, 0x4000002}, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1084.001165][ T8469] kvm: pic: single mode not supported [ 1084.034906][ T8477] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 06:36:21 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1084.054162][ T8469] kvm: pic: single mode not supported [ 1084.323446][ T8483] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1084.354496][ C0] sd 0:0:1:0: [sg0] tag#6651 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1084.365237][ C0] sd 0:0:1:0: [sg0] tag#6651 CDB: Test Unit Ready [ 1084.372123][ C0] sd 0:0:1:0: [sg0] tag#6651 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1084.381899][ C0] sd 0:0:1:0: [sg0] tag#6651 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1084.392085][ C0] sd 0:0:1:0: [sg0] tag#6651 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1084.404484][ C0] sd 0:0:1:0: [sg0] tag#6651 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1084.414543][ C0] sd 0:0:1:0: [sg0] tag#6651 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1084.424547][ C0] sd 0:0:1:0: [sg0] tag#6651 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1084.434484][ C0] sd 0:0:1:0: [sg0] tag#6651 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1084.444376][ C0] sd 0:0:1:0: [sg0] tag#6651 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1084.454329][ C0] sd 0:0:1:0: [sg0] tag#6651 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1084.464251][ C0] sd 0:0:1:0: [sg0] tag#6651 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06:36:21 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext={0x0, 0x3f}, 0x20000, 0x0, 0x0, 0x0, 0x4000002}, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) ioctl(0xffffffffffffffff, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1084.474235][ C0] sd 0:0:1:0: [sg0] tag#6651 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1084.484117][ C0] sd 0:0:1:0: [sg0] tag#6651 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1084.494162][ C0] sd 0:0:1:0: [sg0] tag#6651 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1084.504059][ C0] sd 0:0:1:0: [sg0] tag#6651 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1084.513990][ C0] sd 0:0:1:0: [sg0] tag#6651 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:36:21 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4000, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000005c0)={0x28000000, 0x7ef, 0x2, 0x6, 0x1c400000, 0x6}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000580)={0x4, 0x1, 0x2000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r3 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000540)={0x9, "a46bf0cc931bc7149b3d7e01549597ce56f005c3e94340fce5de40444fb5a4ea", 0x1, 0x1}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0x9b0000, 0x1ff, 0x7, r4, 0x0, &(0x7f00000000c0)={0x980914, 0x101, [], @p_u8=&(0x7f0000000080)=0x80}}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x810c5701, &(0x7f0000000400)) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2, 0x8, 0x0, 0x6, 0x40, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x17, 0x32, 0x80, 0x0, @in={0x2, 0x4e22, @rand_addr=0x7}}, @sadb_sa={0x2, 0x1, 0x4d5, 0x40, 0x96, 0x47, 0x4, 0x40000001}, @sadb_lifetime={0x4, 0x3, 0x3ff, 0x6c79, 0x100000001, 0x5}, @sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x2e7, 0x21, 0x4, 0x4}, @sadb_x_sa2={0x2, 0x13, 0x0, 0x0, 0x0, 0x70bd29, 0x3505}, @sadb_x_sec_ctx={0x21, 0x18, 0x1, 0x7f, 0xf9, "cc7c2e276030b601e08f64e2c79dbae8fd025a5377d56e929041f1f56a24aa2b70d7d256fa9a56498df44dac125f014f5c2e2c6cc5f4e24b65d3cda1eec8497e57198ec13bdc57ea6d7ec3ef464b3be217807fcbae871e3cbc6742370f4d602d021b966276299672df71b6646139c3e1cbc3b5f52e919d85a05f77fc71368f98247c3a4c4d07aba64063e96f32a937966fd4f6db3ba861c99e27a0175a0432b352ccfdf4d561593d39915f917e4f9460afc8bbd03b7e28d4fcc9c9515080739d7052b35636f9f47ef59e970a041f237262c4f1d5638c134b2e077b5e74279fa547df014cc5bc52de222ad89624998c5e19514fb1216ce53ff9"}, @sadb_key={0x9, 0x8, 0x1c8, 0x0, "2f96da030d0bc1e5aaacc8f239cc5ec4a79359a32f235e1e3cb85da09f3204c492dcdcbef825a2b582583431659117e2e3de5b03267b3129bb"}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d6}, @sadb_sa={0x2, 0x1, 0x4d5, 0x27, 0x33, 0x29, 0x4, 0x80000000}]}, 0x200}}, 0x0) [ 1084.940637][ T8513] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 06:36:22 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext={0x0, 0x3f}, 0x20000, 0x0, 0x0, 0x0, 0x4000002}, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) ioctl(0xffffffffffffffff, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1085.017544][ T8514] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1085.030106][ T8469] kvm: pic: single mode not supported [ 1085.030797][ T8469] kvm: pic: single mode not supported [ 1085.097222][ T8514] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 06:36:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = open(&(0x7f0000000000)='./file0\x00', 0x280680, 0xc0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000000c0)='posixacl\x00', 0x0, 0x0) 06:36:22 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext={0x0, 0x3f}, 0x20000, 0x0, 0x0, 0x0, 0x4000002}, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) ioctl(0xffffffffffffffff, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:22 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000ffff0000000000009820000000003b086803ffff633b27e59aa14417000000006d17c3f2c876c69901000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680814966ff9f2d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee09aa272c56100c796d74c92fad7e34bd5f0e4542636c2cb6222bc224649282af53ba5f496b75b8a42657e0c0a675cc276304f3c1955e3e18f161d21d606f2ef2a7ec42902015d553235041a8a08a6d0470d519f61067d7e38717e69aa37681e5711a657e80950afb00e24f3f9567a61f77f817eaaa7af8e75e847a57fb014eb65fc813258f995a0505f1baa5d318fdaee68ff2be4f913f5cc8e883f0900000000000000c5a8a00e5085b900"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1085.556932][ C1] sd 0:0:1:0: [sg0] tag#6652 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1085.567774][ C1] sd 0:0:1:0: [sg0] tag#6652 CDB: Test Unit Ready [ 1085.574570][ C1] sd 0:0:1:0: [sg0] tag#6652 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1085.584487][ C1] sd 0:0:1:0: [sg0] tag#6652 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1085.594413][ C1] sd 0:0:1:0: [sg0] tag#6652 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1085.604337][ C1] sd 0:0:1:0: [sg0] tag#6652 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1085.614198][ C1] sd 0:0:1:0: [sg0] tag#6652 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1085.624112][ C1] sd 0:0:1:0: [sg0] tag#6652 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1085.634107][ C1] sd 0:0:1:0: [sg0] tag#6652 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1085.644048][ C1] sd 0:0:1:0: [sg0] tag#6652 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1085.653930][ C1] sd 0:0:1:0: [sg0] tag#6652 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1085.663846][ C1] sd 0:0:1:0: [sg0] tag#6652 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1085.673726][ C1] sd 0:0:1:0: [sg0] tag#6652 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1085.683709][ C1] sd 0:0:1:0: [sg0] tag#6652 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1085.693773][ C1] sd 0:0:1:0: [sg0] tag#6652 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1085.703743][ C1] sd 0:0:1:0: [sg0] tag#6652 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1085.713778][ C1] sd 0:0:1:0: [sg0] tag#6652 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:36:23 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f0000000180)=r2, 0x12) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0xbaa) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x402, 0x3f, 0x3f, 0x5}, {0x3f, 0x1, 0xb, 0x9}, {0x3f, 0x3, 0x5, 0x1}, {0x3, 0x4, 0x80, 0x1000}, {0x8, 0x20, 0x5, 0x3}]}) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) ptrace(0x4208, r4) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x1000f4) write$cgroup_pid(r5, 0x0, 0x0) 06:36:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x1f0, r4, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xf0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd533}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff8333}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6469dcab}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa259}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xa2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xbbbd}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x219}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xc9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x40004}, 0x4084815) 06:36:23 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext={0x0, 0x3f}, 0x20000, 0x0, 0x0, 0x0, 0x4000002}, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:23 executing program 2: ioctl$TCGETX(0xffffffffffffffff, 0x5432, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540)='/dev/hwrng\x00', 0x8040, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000005c0)={0x4, &(0x7f0000000580)=[{}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000600)={r2, 0x3}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext, 0x38000, 0x0, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000240)={0x2, 0x2, 0x9}) r7 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x4, 0x10000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f00000000c0)) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r8, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="48c16714e6d351d454c4ee29aceda92468920619d0f117e10409b1350379aac961d7cf6ec2a9c7cc95126dfe86fa058e38f2b8352d898e256567f1b770be9a7982feaa88271ce86c34ba84e6a8392ab857c21eb919be0ea6cf1dfec47415f774ba73a02b0cbd", @ANYRES16=r10, @ANYBLOB="2b0f0000000000000000110000000800a40000000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r8, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x98, r10, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_SEQ={0xb, 0xa, "374b4f13b11334"}, @NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY={0x5c, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_TYPE={0x8}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004045) accept$unix(r7, 0x0, &(0x7f00000001c0)) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000280)="11648205231c2e443f72ba0f36103b1de9df1246616c31aa5a31d8f3781232434968d7ca8b086823a554d5b963636b6ed826e8f9153065f2a974d81a755af9363261a7a72ec3e87d46ade150be458dddd4ed0b3970ccf459745e160bee31806993df2e15195a40da0ade708ca2886189218d57d202c9e5a51f7f70d54fdae6cf291ba629bea2769ecda38c0000000000") pipe(&(0x7f00000019c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$phonet(r11, &(0x7f0000001a00)=""/68, 0x44, 0x40000040, 0x0, 0x0) [ 1086.425836][ T8546] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 06:36:23 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) 06:36:23 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext={0x0, 0x3f}, 0x20000, 0x0, 0x0, 0x0, 0x4000002}, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1086.725961][ C1] sd 0:0:1:0: [sg0] tag#6655 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1086.736802][ C1] sd 0:0:1:0: [sg0] tag#6655 CDB: Test Unit Ready [ 1086.743611][ C1] sd 0:0:1:0: [sg0] tag#6655 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1086.753624][ C1] sd 0:0:1:0: [sg0] tag#6655 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1086.763621][ C1] sd 0:0:1:0: [sg0] tag#6655 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1086.773534][ C1] sd 0:0:1:0: [sg0] tag#6655 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1086.783443][ C1] sd 0:0:1:0: [sg0] tag#6655 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1086.793295][ C1] sd 0:0:1:0: [sg0] tag#6655 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1086.803210][ C1] sd 0:0:1:0: [sg0] tag#6655 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1086.813079][ C1] sd 0:0:1:0: [sg0] tag#6655 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1086.822990][ C1] sd 0:0:1:0: [sg0] tag#6655 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1086.832962][ C1] sd 0:0:1:0: [sg0] tag#6655 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1086.843005][ C1] sd 0:0:1:0: [sg0] tag#6655 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1086.852980][ C1] sd 0:0:1:0: [sg0] tag#6655 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1086.863062][ C1] sd 0:0:1:0: [sg0] tag#6655 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06:36:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x22080, 0x0) accept4$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10, 0x800) r4 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$cgroup_ro(r4, &(0x7f0000009200)='cgroup.controllers\x00', 0x0, 0x0) sendmsg$nl_crypto(r5, &(0x7f00000093c0)={&(0x7f0000009240)={0x10, 0x0, 0x0, 0x108000}, 0xc, &(0x7f0000009380)={&(0x7f0000009280)=@getstat={0xe0, 0x15, 0x400, 0x70bd2b, 0x25dfdbfd, {{'drbg_nopr_hmac_sha256\x00'}, [], [], 0x400, 0x400}, ["", "", "", "", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x11) r6 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r8 = syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x8001, 0x4000) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r8, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x4) [ 1086.872998][ C1] sd 0:0:1:0: [sg0] tag#6655 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1086.882929][ C1] sd 0:0:1:0: [sg0] tag#6655 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:36:24 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext={0x0, 0x3f}, 0x20000, 0x0, 0x0, 0x0, 0x4000002}, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000000201040000000000000000000000003c0002802c00018014000300c21c062a396c4533d15423b10aa8c37014000400fe8000000000000000000000000000aa0c0002800500010000000000100003800c0002800500010021e4e69cf2ee967a"], 0x64}}, 0x0) dup3(r2, r1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000000)={0xea, 0x21, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040)={0xf4}, 0x4) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x84}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) dup2(r7, r8) [ 1087.143828][ T8565] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1087.184579][ T8565] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1087.211877][ T8565] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1087.247047][ T8567] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1087.258991][ T8565] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1087.318999][ T8571] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 06:36:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={r1, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000004c0)='\x00'}, 0x30) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext={0x34}, 0x0, 0x80000000}, r2, 0x0, 0xffffffffffffffff, 0x1) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x4, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r3 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r4 = socket(0x6, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) recvmsg(r5, &(0x7f0000000b40)={&(0x7f00000005c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/206, 0xce}, {&(0x7f0000000800)=""/178, 0xb2}, {&(0x7f00000008c0)=""/143, 0x8f}, {&(0x7f0000000740)=""/10, 0xa}, {&(0x7f0000000980)=""/78, 0x4e}], 0x5, &(0x7f0000000a80)=""/149, 0x95}, 0x2000) write(r4, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) r6 = socket$inet(0xa, 0x801, 0x84) sendmsg$inet(r6, &(0x7f00000026c0)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x81e}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000002c0)="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", 0x1c5}], 0x1}, 0x0) listen(r6, 0x3) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000480)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000780)={r9, 0x70, "2f00e812e554d8fdb595f40ac122b26a09e2261c8b16033625fa0c9be4be7fbfcedb2f1066f5b7ed3dce5e4175bc78985a34e1444b8f73a669e77ce516fb931540e3786b57befd8a77958168ac1e6b61f22e34b37391b83f72df04e1a3c441eed5cfe3fb5ea1bc321b1c62bdc7a596d3"}, &(0x7f0000000140)=0x78) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f00000001c0)={r9, @in={{0x2, 0x4e24, @remote}}, [0x3, 0x3, 0x9, 0x7, 0x4, 0x0, 0x0, 0x33f9, 0x40000000db8, 0x2, 0xfffffffffffffff8, 0x6, 0x10000, 0x5, 0x1]}, &(0x7f00000000c0)=0x100) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000002c0)={r10, 0x1, 0xff, 0x2}, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000540)={0x1f, 0x7, 0x208, 0x5, 0xffffff4f, 0xfe, 0xfffffffd, 0xffff, r10}, &(0x7f0000000580)=0x20) 06:36:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext={0x0, 0x3f}, 0x20000, 0x0, 0x0, 0x0, 0x4000002}, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000080)=0x4) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [0x49, 0xffff]}) socket$key(0xf, 0x3, 0x2) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000000)) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x82, 0x0) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0x8, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 06:36:24 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f0000000180)=r2, 0x12) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0xbaa) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x402, 0x3f, 0x3f, 0x5}, {0x3f, 0x1, 0xb, 0x9}, {0x3f, 0x3, 0x5, 0x1}, {0x3, 0x4, 0x80, 0x1000}, {0x8, 0x20, 0x5, 0x3}]}) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) ptrace(0x4208, r4) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x1000f4) write$cgroup_pid(r5, 0x0, 0x0) 06:36:24 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) 06:36:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext={0x0, 0x3f}, 0x20000, 0x0, 0x0, 0x0, 0x4000002}, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1087.885942][ T8586] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1087.909947][ C0] sd 0:0:1:0: [sg0] tag#6592 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1087.920621][ C0] sd 0:0:1:0: [sg0] tag#6592 CDB: Test Unit Ready [ 1087.927468][ C0] sd 0:0:1:0: [sg0] tag#6592 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1087.937353][ C0] sd 0:0:1:0: [sg0] tag#6592 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1087.947257][ C0] sd 0:0:1:0: [sg0] tag#6592 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1087.957198][ C0] sd 0:0:1:0: [sg0] tag#6592 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1087.967084][ C0] sd 0:0:1:0: [sg0] tag#6592 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1087.967955][ T8579] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1087.976947][ C0] sd 0:0:1:0: [sg0] tag#6592 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1087.977049][ C0] sd 0:0:1:0: [sg0] tag#6592 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1088.006310][ C0] sd 0:0:1:0: [sg0] tag#6592 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1088.016194][ C0] sd 0:0:1:0: [sg0] tag#6592 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1088.026080][ C0] sd 0:0:1:0: [sg0] tag#6592 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1088.035947][ C0] sd 0:0:1:0: [sg0] tag#6592 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1088.045818][ C0] sd 0:0:1:0: [sg0] tag#6592 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1088.055760][ C0] sd 0:0:1:0: [sg0] tag#6592 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1088.065677][ C0] sd 0:0:1:0: [sg0] tag#6592 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1088.075609][ C0] sd 0:0:1:0: [sg0] tag#6592 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:36:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524, 0x0, 0xc4e8}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff40, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r5 = dup(r0) write$6lowpan_control(r5, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 2', 0x1b) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:36:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext={0x0, 0x3f}, 0x20000, 0x0, 0x0, 0x0, 0x4000002}, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:25 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000ffff0000000000009820000000003b086803ffff633b27e59aa14417000000006d17c3f2c876c69901000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680814966ff9f2d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee09aa272c56100c796d74c92fad7e34bd5f0e4542636c2cb6222bc224649282af53ba5f496b75b8a42657e0c0a675cc276304f3c1955e3e18f161d21d606f2ef2a7ec42902015d553235041a8a08a6d0470d519f61067d7e38717e69aa37681e5711a657e80950afb00e24f3f9567a61f77f817eaaa7af8e75e847a57fb014eb65fc813258f995a0505f1baa5d318fdaee68ff2be4f913f5cc8e883f0900000000000000c5a8a00e5085b900"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) 06:36:26 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f0000000180)=r2, 0x12) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0xbaa) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x402, 0x3f, 0x3f, 0x5}, {0x3f, 0x1, 0xb, 0x9}, {0x3f, 0x3, 0x5, 0x1}, {0x3, 0x4, 0x80, 0x1000}, {0x8, 0x20, 0x5, 0x3}]}) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) ptrace(0x4208, r4) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x1000f4) write$cgroup_pid(r5, 0x0, 0x0) [ 1089.012954][ C1] sd 0:0:1:0: [sg0] tag#6593 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1089.023723][ C1] sd 0:0:1:0: [sg0] tag#6593 CDB: Test Unit Ready [ 1089.030381][ C1] sd 0:0:1:0: [sg0] tag#6593 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1089.040325][ C1] sd 0:0:1:0: [sg0] tag#6593 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1089.050225][ C1] sd 0:0:1:0: [sg0] tag#6593 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1089.060314][ C1] sd 0:0:1:0: [sg0] tag#6593 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1089.070188][ C1] sd 0:0:1:0: [sg0] tag#6593 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1089.080187][ C1] sd 0:0:1:0: [sg0] tag#6593 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1089.090191][ C1] sd 0:0:1:0: [sg0] tag#6593 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1089.100080][ C1] sd 0:0:1:0: [sg0] tag#6593 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1089.110209][ C1] sd 0:0:1:0: [sg0] tag#6593 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1089.120088][ C1] sd 0:0:1:0: [sg0] tag#6593 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1089.129917][ C1] sd 0:0:1:0: [sg0] tag#6593 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1089.139847][ C1] sd 0:0:1:0: [sg0] tag#6593 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1089.149720][ C1] sd 0:0:1:0: [sg0] tag#6593 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1089.159655][ C1] sd 0:0:1:0: [sg0] tag#6593 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1089.169541][ C1] sd 0:0:1:0: [sg0] tag#6593 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:36:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1089.403152][ T8625] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 06:36:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:26 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80003, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r3, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) connect$unix(r3, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) write(r2, &(0x7f0000000080)="24000000210099f0003bf90000ed190e020008160004000000ba0080080002007fbcfe6f", 0x24) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f00000001c0)={0x10002001}) r9 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup3(r11, r10, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$VIDIOC_S_FBUF(r12, 0x4030560b, &(0x7f0000000300)={0x2, 0x40, &(0x7f00000002c0)="1b2602789695e650711dc1501a51962edba26a0ceaf6e9f334e6c511d84771a489b521ffeb6fbcb79786db3d7b", {0x6, 0x4cf, 0x47425247, 0x2, 0x0, 0x6, 0x7, 0xf5a4}}) ioctl(r9, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r13 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r13, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) bind$rds(r13, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x5b2838ce}, 0x10) 06:36:26 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) accept4(r8, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x4}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r9}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0xfffffffffffffffd, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000, 0x0, 0x4]}}, r9}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000200), r9}}, 0x18) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x1, {0x1f, 0x1, "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", 0x1, 0x33, 0xc3, 0x7, 0x2, 0x56, 0x5}, r9}}, 0x128) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup3(r10, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$VFIO_CHECK_EXTENSION(r11, 0x3b65, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r13 = fcntl$dupfd(r12, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) r14 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r14, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x2, 0x3, 0x240, 0x98, 0x0, 0x98, 0x98, 0x0, 0x1a8, 0x1a8, 0x1a8, 0x1a8, 0x1a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x6020000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40, 'set\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0xcc08bf2e226ef518, 0x8, 0x7, 0x5, 0x1, 0x1], 0x3}, {0x1, [0x2, 0xe, 0x5, 0x5, 0x2], 0x6, 0x1}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) ioctl$UFFDIO_ZEROPAGE(r13, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) 06:36:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext={0x0, 0x3f}, 0x20000, 0x0, 0x0, 0x0, 0x4000002}, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:27 executing program 5 (fault-call:25 fault-nth:0): perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000ffff0000000000009820000000003b086803ffff633b27e59aa14417000000006d17c3f2c876c69901000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680814966ff9f2d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee09aa272c56100c796d74c92fad7e34bd5f0e4542636c2cb6222bc224649282af53ba5f496b75b8a42657e0c0a675cc276304f3c1955e3e18f161d21d606f2ef2a7ec42902015d553235041a8a08a6d0470d519f61067d7e38717e69aa37681e5711a657e80950afb00e24f3f9567a61f77f817eaaa7af8e75e847a57fb014eb65fc813258f995a0505f1baa5d318fdaee68ff2be4f913f5cc8e883f0900000000000000c5a8a00e5085b900"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') 06:36:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext={0x0, 0x3f}, 0x20000, 0x0, 0x0, 0x0, 0x4000002}, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:27 executing program 0: syz_open_dev$sndseq(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="84000000000201040000000000000000000000003c0002802c00018014000300c21c062a396c4533d15423b10aa8c37014000400fe8000000000000000000000000000aa0c00028005000100000300fe8800000000000000000000000000011400040000000000000000000000000000000001040001806fe6458a58a7cef9ea7277e5cc97b4f3662e8263a63cebb0d39c2dd93d5adbc8fbfacf5569d228fc87f47a9369bb3e1d4c0a98ff5ee0b08440c2cff8fd529470822fd14b9c03cc1928971eb29cd266a18e6be68863d4f3cc27de1801cf850cf37f8017739a60bc93e519f906"], 0x84}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) write$binfmt_misc(r1, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000180)=0xc) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x38c, 0x1, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x400}, @CTA_EXPECT_MASTER={0x58, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}, @CTA_EXPECT_NAT={0x2e8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={[], [], @multicast2}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, [], 0x1b}}, {0x14, 0x4, @dev={0xfe, 0x80, [], 0x26}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x14}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xb3}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={[], [], @empty}}, {0x14, 0x4, @dev={0xfe, 0x80, [], 0x3e}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @rand_addr=0x3}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}]}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}]}, 0x38c}, 0x1, 0x0, 0x0, 0x2000c014}, 0x8000) write$sndseq(r2, &(0x7f0000000100)=[{0x4, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x30) write$sndseq(r2, &(0x7f0000000340)=[{0x0, 0x0, 0x0, 0x8, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {0x8}, {}, @result={0x4}}], 0x38) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) [ 1090.478691][ C1] sd 0:0:1:0: [sg0] tag#6601 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1090.489539][ C1] sd 0:0:1:0: [sg0] tag#6601 CDB: Test Unit Ready [ 1090.496382][ C1] sd 0:0:1:0: [sg0] tag#6601 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1090.506705][ C1] sd 0:0:1:0: [sg0] tag#6601 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1090.516563][ C1] sd 0:0:1:0: [sg0] tag#6601 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06:36:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x30, r2, 0x1, 0x0, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x4, 0x1, @l2={'ib', 0x3a, 'veth0_to_team\x00'}}]}]}, 0x30}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205649, &(0x7f0000000380)={0x990000, 0x1, 0x1, r3, 0x0, &(0x7f0000000340)={0x9909c8, 0x3ff, [], @p_u8=&(0x7f0000000300)=0x3}}) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r7, 0x111, 0x4, 0x4, 0x4) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x50, r2, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff2ae0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x810) [ 1090.526503][ C1] sd 0:0:1:0: [sg0] tag#6601 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1090.536761][ C1] sd 0:0:1:0: [sg0] tag#6601 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1090.546708][ C1] sd 0:0:1:0: [sg0] tag#6601 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1090.556590][ C1] sd 0:0:1:0: [sg0] tag#6601 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1090.566600][ C1] sd 0:0:1:0: [sg0] tag#6601 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1090.576466][ C1] sd 0:0:1:0: [sg0] tag#6601 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1090.586549][ C1] sd 0:0:1:0: [sg0] tag#6601 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1090.596516][ C1] sd 0:0:1:0: [sg0] tag#6601 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1090.606379][ C1] sd 0:0:1:0: [sg0] tag#6601 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1090.616266][ C1] sd 0:0:1:0: [sg0] tag#6601 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06:36:27 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f0000000180)=r2, 0x12) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0xbaa) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x402, 0x3f, 0x3f, 0x5}, {0x3f, 0x1, 0xb, 0x9}, {0x3f, 0x3, 0x5, 0x1}, {0x3, 0x4, 0x80, 0x1000}, {0x8, 0x20, 0x5, 0x3}]}) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) ptrace(0x4208, r4) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x1000f4) write$cgroup_pid(r5, 0x0, 0x0) [ 1090.626226][ C1] sd 0:0:1:0: [sg0] tag#6601 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1090.636088][ C1] sd 0:0:1:0: [sg0] tag#6601 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:36:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext={0x0, 0x3f}, 0x20000, 0x0, 0x0, 0x0, 0x4000002}, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1090.989864][ T8655] FAULT_INJECTION: forcing a failure. [ 1090.989864][ T8655] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1091.003664][ T8655] CPU: 1 PID: 8655 Comm: syz-executor.5 Not tainted 5.5.0-rc5-syzkaller #0 [ 1091.012800][ T8655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1091.013429][ T8655] Call Trace: [ 1091.013429][ T8655] dump_stack+0x1c9/0x220 [ 1091.027268][ T8655] should_fail+0xa4e/0xa60 [ 1091.027268][ T8655] should_fail_alloc_page+0x1e9/0x260 [ 1091.027268][ T8655] __alloc_pages_nodemask+0x3a8/0x5f60 [ 1091.027268][ T8655] ? flat_init_apic_ldr+0x170/0x170 [ 1091.027268][ T8655] ? lapic_next_event+0x6e/0xa0 [ 1091.027268][ T8655] ? apic_is_clustered_box+0xa0/0xa0 [ 1091.027268][ T8655] ? clockevents_program_min_delta+0x73c/0x7e0 [ 1091.027268][ T8655] ? tick_program_event+0xff/0x1c0 [ 1091.027268][ T8655] ? kmsan_get_metadata+0x11d/0x180 [ 1091.027268][ T8655] alloc_pages_vma+0xc68/0x1870 [ 1091.079299][ T8655] wp_page_copy+0x314/0x2dc0 [ 1091.079299][ T8655] ? __list_add_valid+0xb8/0x420 [ 1091.079299][ T8655] ? kmsan_get_metadata+0x11d/0x180 [ 1091.079299][ T8655] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1091.079299][ T8655] ? kmsan_get_metadata+0x11d/0x180 [ 1091.079299][ T8655] ? kmsan_get_metadata+0x11d/0x180 [ 1091.079299][ T8655] do_wp_page+0x1c74/0x3070 [ 1091.079299][ T8655] ? kmsan_get_metadata+0x4f/0x180 [ 1091.079299][ T8655] ? kmsan_get_metadata+0x4f/0x180 [ 1091.079299][ T8655] ? kmsan_set_origin_checked+0x95/0xf0 [ 1091.079299][ T8655] handle_mm_fault+0x48bb/0x9de0 [ 1091.079299][ T8655] do_user_addr_fault+0xb30/0x1520 [ 1091.079299][ T8655] __do_page_fault+0x18f/0x400 [ 1091.079299][ T8655] do_page_fault+0xbb/0x4e0 [ 1091.079299][ T8655] ? kmsan_unpoison_pt_regs+0x29/0x30 [ 1091.079299][ T8655] page_fault+0x4e/0x60 [ 1091.079299][ T8655] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 1091.079299][ T8655] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 1091.079299][ T8655] RSP: 0018:ffffaf86862ff420 EFLAGS: 00010202 [ 1091.079299][ T8655] RAX: ffffffff84a218f9 RBX: ffff913ac30e6550 RCX: 0000000000000580 [ 1091.079299][ T8655] RDX: 0000000000000580 RSI: ffff913ab883c000 RDI: 0000000020003ac0 [ 1091.079299][ T8655] RBP: ffffaf86862ff490 R08: ffffef804000000f R09: ffff913a6fffb000 [ 1091.079299][ T8655] R10: 0000000000000004 R11: ffffffffa6c5edb0 R12: ffff913ab883c000 [ 1091.079299][ T8655] R13: ffffaf86862ff428 R14: 0000000020003ac0 R15: 0000000000000580 [ 1091.079299][ T8655] ? skb_copy_datagram_iter+0x2b0/0x2b0 [ 1091.079299][ T8655] ? copyout+0x10c/0x1e0 [ 1091.079299][ T8655] _copy_to_iter+0x34e/0x2420 [ 1091.079299][ T8655] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1091.079299][ T8655] simple_copy_to_iter+0xd7/0x130 [ 1091.079299][ T8655] __skb_datagram_iter+0x25f/0xfc0 [ 1091.079299][ T8655] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1091.079299][ T8655] ? skb_copy_datagram_iter+0x2b0/0x2b0 [ 1091.079299][ T8655] skb_copy_datagram_iter+0x292/0x2b0 [ 1091.079299][ T8655] tcp_recvmsg+0x1aa0/0x4f10 [ 1091.079299][ T8655] ? aa_sk_perm+0x83c/0xcd0 [ 1091.079299][ T8655] ? kmsan_get_metadata+0x11d/0x180 [ 1091.079299][ T8655] ? tcp_mmap+0x150/0x150 [ 1091.079299][ T8655] ? tcp_mmap+0x150/0x150 [ 1091.079299][ T8655] inet_recvmsg+0x237/0x7d0 [ 1091.079299][ T8655] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1091.079299][ T8655] ____sys_recvmsg+0xe5d/0x1240 [ 1091.079299][ T8655] ? kmsan_get_metadata+0x4f/0x180 [ 1091.079299][ T8655] __sys_recvmsg+0x564/0xaf0 [ 1091.079299][ T8655] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1091.079299][ T8655] ? prepare_exit_to_usermode+0x1ca/0x520 [ 1091.079299][ T8655] __se_sys_recvmsg+0x97/0xb0 [ 1091.079299][ T8655] __x64_sys_recvmsg+0x4a/0x70 [ 1091.079299][ T8655] do_syscall_64+0xb8/0x160 [ 1091.079299][ T8655] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1091.079299][ T8655] RIP: 0033:0x45b349 [ 1091.079299][ T8655] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1091.079299][ T8655] RSP: 002b:00007f4c45c42c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1091.079299][ T8655] RAX: ffffffffffffffda RBX: 00007f4c45c436d4 RCX: 000000000045b349 [ 1091.079299][ T8655] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000009 [ 1091.079299][ T8655] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1091.079299][ T8655] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 1091.079299][ T8655] R13: 0000000000000890 R14: 00000000004c9f28 R15: 0000000000000000 06:36:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext={0x0, 0x3f}, 0x20000, 0x0, 0x0, 0x0, 0x4000002}, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:28 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000440)={0x0, 0x5, 0x0, 0x0, 0x0, 0xcb, &(0x7f0000001780)=""/203, 0x24, &(0x7f0000000300)=""/36}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340), 0xc, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYRES16=0x0, @ANYBLOB="000029bd7000fcdbdf250a0000000800090005ac0f0004000b"], 0x2}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a80)={0x0, 0x0, 0x1, 0x0, @scatter={0x2, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/109, 0x6d}, {&(0x7f0000000780)=""/4096, 0x1000}]}, &(0x7f0000001880)='4', 0x0, 0x80000001, 0x20, 0x2, &(0x7f0000000640)}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x96f60ba188302d1f, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x2}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000001900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000018c0)={&(0x7f0000000700)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44054}, 0x1010) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r6, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r6, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000127bd7000000400d1258006000400d70a000006000400020000010000000004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:36:29 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f0000000180)=r2, 0x12) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0xbaa) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x402, 0x3f, 0x3f, 0x5}, {0x3f, 0x1, 0xb, 0x9}, {0x3f, 0x3, 0x5, 0x1}, {0x3, 0x4, 0x80, 0x1000}, {0x8, 0x20, 0x5, 0x3}]}) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) ptrace(0x4208, r4) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x1000f4) 06:36:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x20000, 0x0, 0x0, 0x0, 0x4000002}, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1092.277835][ T8692] __nla_validate_parse: 5 callbacks suppressed [ 1092.277868][ T8692] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 06:36:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext, 0x0, 0x40000000000}, 0x0, 0xffffffffffffffff, r3, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@can={{0x2, 0x0, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "7467523739edd207"}, 0x10}}, 0xc840) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:29 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000ffff0000000000009820000000e93b086803ffff633b27e59aa14417000000006d17c3f2c876c69901000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680814966ff9f2d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee09a897cdd8400c796d74c92fad7e34bd5f0e4542636c2cb6222bc224649282af53ba5f496b7a5351fee38a123e76f8dc75b8a42657e0c0a675cc276304f3c1955e3e18f161d21d606f2ef2a7ec42902015d553235041a8a08a6d0470d519f61067d7e38717e69aa37681e5711a657e80950afb00e24f3f9567a61f77f817eaaa7af8e75e847a57fb014eb65fc813258f995a0505f1baa5d318fdaee68ff2be4f913f5cc8e883f0900000000000000c5a8a00e5085b90032a4b384ac164900748da1e1fdce09c0d7fc99fc863fa2ec5515611ef16d8012e9ce3a9c51151353e716fc72461d1e8d560d933a28811b23b05c7df3d8226cff024a43c4b65c828292bd669be72f92ace9741b53d40ca294e2992da9947d"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000f6002c6f3ae74f8f1be5a8903a13c6b1f0df41d8a063fef8bce7e03f54681afa080eb76f44b9b537447a9d71d36822c2c58fff25d921d0891774ae57ccfdc5007ccc56a50053fab75f9b09004f99e80187d735", @ANYRES16=r4, @ANYBLOB="dd68000000000000000003000000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34040010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000600000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3b00000002000000f2fb0000000000000000040000000000"]}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') 06:36:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x20000, 0x0, 0x0, 0x0, 0x4000002}, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:29 executing program 0: lstat(&(0x7f0000000480)='./file0/file0\x00', 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, r6, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'rose0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4004010) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r7 = socket(0x10, 0x80002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="290000002000390700083fffffffda06020000002009c34d040000040d001400ffffa65dfffffffff0", 0x29}], 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) sendmsg(r8, &(0x7f0000000c00)={&(0x7f00000005c0)=@nl=@unspec, 0x80, &(0x7f0000000740)=[{&(0x7f0000000640)="849e561bd6adac36799978f19150e3b7014b841f051ac6eabc4aaf12e1241a4c74e91dad0f764e6e8d65b8af18503adb3ba8d1bdb7095520851a75bca23b0a85c77667cda3795dd2e3d6e925e6be179e6f5e4093995d199d34caded577c205bc459a", 0x62}, {&(0x7f0000000800)="543bb9417328bf1e6cc9284b571cb546e576ea2cb4d9f1dff8a3451fc9554e2f1ce6d333226b6dce1a9a16544a601f5d2f7affd363bbfa150bd1344d79967b51e3568afc925c47a5543f52aa9cc5987e166e1cb629c9254794bcb044e3cec6975c5b9acca2e42b222e8f490c9112ce028fa918f333d59c8991ef2b0e180f56b01cc8ce12cc73b13ef274a89fe1381910ca7de1919c350834469f4083ac69456c62a21e648a585235bbbb12ee0c052a3621ccc89c8a84f2be56f334029ff96fbe8351b37def4194311856c1c6828bc739a6b63137069be8a28077", 0xda}, {&(0x7f00000006c0)="7293f3ed1e1265c6d78aa90509bf8edd9cb5fa9faf583a3ae4806a302d80978ac9d7cb13db5853be8787484f1259bad21e84b2b2018b241bac46ff4c30c1d2b2e1012b94c2c71341e63896cf7f785b3b04a2756ab118088d4c70d46dff", 0x5d}, {&(0x7f0000000900)="0ce578aafec266b74daacb72f6711df77bfbcfa300b31420bd22d873e890fd8c743c707b199a131620df8457486eb2c0c37ba7717541987ea8695fb99f5571885b59791d247a22a00d33173181a97cf7760afdbbf40409e844e709767b63b6429483e91b7f12e836854a3c48a9a6837540720f7da7c1e87c05835a64a9e4c058b184b607629a053139e26b3798d18bb1633070fc5b", 0x95}], 0x4, &(0x7f00000009c0)=[{0xe0, 0x10c, 0x1d4b, "79b8e8d4cd1477289255dee8ffb61d888f051ba014e8688e5ee5f87363a7d629f1b32b76d14de82ecc1ca9cef191fd97a202d169ab629c8642d8802efb01218ef0ddcac49739286c6aa470990a80b447e289fd8974a15446eec308a71bd23c94eef2b2322eec0b6e2a1528a6429248328c458dc46cd02f3b0beff8564f0b5c42273ce0db8ea19c34e81a41ba22e665454eed0800d7289d6738080ff2978d45a86304eb7784facff39fd1a7b989f41cf8dede9b223fe966cf231273c8ee5445f0976530ea3c48c926007b"}, {0xe0, 0x10d, 0x3, "def9f9ee8a523cd7ce6b177364cca728b1eaadb576d227b313601f56cddacdc3735a63a7ea9b07134c39cb6d13a897a8429bf0c89e8d25c02e7da34966aec01d1a6d54fbd4fb9b4b4aa2d58112e757505bd0fa569a630f2f95306f72b375a5eaccc582ebcdc58c685243457b86e496038102246209cea0bad4b23258958bc66d450e63edc9dc37648629931a0eb913a68f7d60e3248b780347cb2b77ced2721d635c6ca3f8f4ecf3b91dea9bf114cdd5147f2aea0e2a73ab085096815ed483df28bf636fe7c91c6d4fe4ae79"}, {0x70, 0x112, 0xffffffaa, "49a54e35af75bfe583c6a489acb6206387b683af2b886695355a83c79e0e436bef085a105488085d25d9c7b375b84c8fb3f24b4d5d91e0242767acaf4dcde34843acb0f20c3607e150401e3dd12ca1d137da42f6da0ee5f4f504df9f"}], 0x230}, 0x40c0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r9, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) r10 = socket$inet(0xa, 0x801, 0x84) sendmsg$inet(r10, &(0x7f00000026c0)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x81e}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000002c0)="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", 0x1c5}], 0x1}, 0x0) listen(r10, 0x3) r11 = accept4(r10, 0x0, 0x0, 0x0) r12 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000000480)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r11, 0x84, 0x6d, &(0x7f0000000780)={r13, 0x70, "2f00e812e554d8fdb595f40ac122b26a09e2261c8b16033625fa0c9be4be7fbfcedb2f1066f5b7ed3dce5e4175bc78985a34e1444b8f73a669e77ce516fb931540e3786b57befd8a77958168ac1e6b61f22e34b37391b83f72df04e1a3c441eed5cfe3fb5ea1bc321b1c62bdc7a596d3"}, &(0x7f0000000140)=0x78) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f00000000c0)={r13, @in={{0x2, 0x4e20, @multicast2}}, 0x2, 0x7}, 0x90) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924924924926c0, 0x0) 06:36:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) ftruncate(0xffffffffffffffff, 0x7fffffff) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x28, 0x5, 0x14, 0x5, 0xa, 0x68, 0x3, 0x5d, 0xffffffffffffffff}) 06:36:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x20000, 0x0, 0x0, 0x0, 0x4000002}, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r15, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r16, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r17 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r17, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r18 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r19 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r19, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r20 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r20, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r21 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r21, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYPTR64=&(0x7f0000001580)=ANY=[@ANYRESDEC=r16, @ANYRESOCT, @ANYRESDEC=r21, @ANYPTR=&(0x7f00000013c0)=ANY=[@ANYRES16, @ANYRESOCT=r17, @ANYBLOB="4a218fcbf30b63c0ea4565901cb2aec327273d98ef457edd964bef2454462bcd93a899b95aa41deb4043f10373def9747193ee73069754dc4130de83fcd7c8d71083", @ANYRES16, @ANYRESHEX, @ANYRES64=r4, @ANYRES32, @ANYRES32=r18, @ANYRESHEX], @ANYRES32=r19, @ANYRESHEX=r20, @ANYPTR=&(0x7f0000001480)=ANY=[@ANYPTR], @ANYRES32], @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x3}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {}, {0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) r22 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r22, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r22, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) accept4$packet(r22, &(0x7f0000001240)={0x11, 0x0, 0x0}, &(0x7f0000001280)=0x14, 0x800) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000001380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80904}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x54, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r23}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000040}, 0x20004804) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) 06:36:30 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f0000000180)=r2, 0x12) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0xbaa) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x402, 0x3f, 0x3f, 0x5}, {0x3f, 0x1, 0xb, 0x9}, {0x3f, 0x3, 0x5, 0x1}, {0x3, 0x4, 0x80, 0x1000}, {0x8, 0x20, 0x5, 0x3}]}) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) ptrace(0x4208, r4) creat(&(0x7f0000000000)='./bus\x00', 0x0) [ 1093.038037][ T8713] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1093.248896][ T8729] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 06:36:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext, 0x20000, 0x0, 0x0, 0x0, 0x4000002}, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1093.414189][ T8732] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1093.432229][ T8732] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1093.446873][ T8732] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1093.465495][ T8732] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1093.483273][ T8732] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1093.499530][ T8732] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 06:36:30 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0xf) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f0000000040)={0x1, 0x0, {0x1, 0x2, 0x1005, 0x7, 0x8, 0x2, 0x0, 0x3}}) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000)='NET_DM\x00') 06:36:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x200040, 0x0) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r8, 0xc0a85322, &(0x7f0000000480)) 06:36:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000002}, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:31 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f0000000180)=r2, 0x12) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0xbaa) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x402, 0x3f, 0x3f, 0x5}, {0x3f, 0x1, 0xb, 0x9}, {0x3f, 0x3, 0x5, 0x1}, {0x3, 0x4, 0x80, 0x1000}, {0x8, 0x20, 0x5, 0x3}]}) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) ptrace(0x4208, r4) creat(&(0x7f0000000000)='./bus\x00', 0x0) [ 1094.209086][ T8763] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 06:36:31 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000ffff0000000000009820000000003b086803ffff633b27e59aa14417000000006d17c3f2c876c69901000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680814966ff9f2d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee09aa272c56100c796d74c92fad7e34bd5f0e4542636c2cb6222bc224649282af53ba5f496b75b8a42657e0c0a675cc276304f3c1955e3e18f161d21d606f2ef2a7ec42902015d553235041a8a08a6d0470d519f61067d7e38717e69aa37681e5711a657e80950afb00e24f3f9567a61f77f817eaaa7af8e75e847a57fb014eb65fc813258f995a0505f1baa5d318fdaee68ff2be4f913f5cc8e883f0900000000000000c5a8a00e5085b900"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x10000}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0xb, &(0x7f0000000100), 0x4f) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') 06:36:31 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCNXCL(r2, 0x540d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) dup3(r6, r3, 0x0) 06:36:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0xffffffff, 0x0, 0x0, 0x2, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) r1 = syz_open_pts(r0, 0x1) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) 06:36:31 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f0000000180)=r2, 0x12) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0xbaa) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x402, 0x3f, 0x3f, 0x5}, {0x3f, 0x1, 0xb, 0x9}, {0x3f, 0x3, 0x5, 0x1}, {0x3, 0x4, 0x80, 0x1000}, {0x8, 0x20, 0x5, 0x3}]}) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) ptrace(0x4208, r4) [ 1094.815667][ C1] sd 0:0:1:0: [sg0] tag#6606 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1094.826375][ C1] sd 0:0:1:0: [sg0] tag#6606 CDB: Test Unit Ready [ 1094.833168][ C1] sd 0:0:1:0: [sg0] tag#6606 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1094.843063][ C1] sd 0:0:1:0: [sg0] tag#6606 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1094.853019][ C1] sd 0:0:1:0: [sg0] tag#6606 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1094.862942][ C1] sd 0:0:1:0: [sg0] tag#6606 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1094.872803][ C1] sd 0:0:1:0: [sg0] tag#6606 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1094.882686][ C1] sd 0:0:1:0: [sg0] tag#6606 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1094.893175][ C1] sd 0:0:1:0: [sg0] tag#6606 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1094.903027][ C1] sd 0:0:1:0: [sg0] tag#6606 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1094.912950][ C1] sd 0:0:1:0: [sg0] tag#6606 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1094.922837][ C1] sd 0:0:1:0: [sg0] tag#6606 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1094.932698][ C1] sd 0:0:1:0: [sg0] tag#6606 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1094.942706][ C1] sd 0:0:1:0: [sg0] tag#6606 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1094.952568][ C1] sd 0:0:1:0: [sg0] tag#6606 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1094.962480][ C1] sd 0:0:1:0: [sg0] tag#6606 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1094.972420][ C1] sd 0:0:1:0: [sg0] tag#6606 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:36:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}}, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:32 executing program 0: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x4080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff62cd1db9820000000003b08d403f7ff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e2656000008004902e181baf9451cd8489f9c5c951d2c0945c08ba8c552fc99a74220076538"], 0x6e) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) r8 = gettid() process_vm_writev(r8, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f0000000400)=r8) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @remote}, 0x2, 0x0, 0x0, 0x1}}, 0x26) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'\x00', r6}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xfff2}, {0x5, 0x9}, {0xffff, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x880) syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') msgget$private(0x0, 0x0) flock(0xffffffffffffffff, 0x54489ca478c875aa) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, 0x0) [ 1095.359693][ C0] sd 0:0:1:0: [sg0] tag#6607 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1095.370502][ C0] sd 0:0:1:0: [sg0] tag#6607 CDB: Test Unit Ready [ 1095.377340][ C0] sd 0:0:1:0: [sg0] tag#6607 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1095.387260][ C0] sd 0:0:1:0: [sg0] tag#6607 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1095.397158][ C0] sd 0:0:1:0: [sg0] tag#6607 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1095.407141][ C0] sd 0:0:1:0: [sg0] tag#6607 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1095.417110][ C0] sd 0:0:1:0: [sg0] tag#6607 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1095.428741][ C0] sd 0:0:1:0: [sg0] tag#6607 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1095.438623][ C0] sd 0:0:1:0: [sg0] tag#6607 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1095.448599][ C0] sd 0:0:1:0: [sg0] tag#6607 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1095.458913][ C0] sd 0:0:1:0: [sg0] tag#6607 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1095.468799][ C0] sd 0:0:1:0: [sg0] tag#6607 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1095.478713][ C0] sd 0:0:1:0: [sg0] tag#6607 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1095.488983][ C0] sd 0:0:1:0: [sg0] tag#6607 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1095.498873][ C0] sd 0:0:1:0: [sg0] tag#6607 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06:36:32 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f0000000180)=r2, 0x12) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0xbaa) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x402, 0x3f, 0x3f, 0x5}, {0x3f, 0x1, 0xb, 0x9}, {0x3f, 0x3, 0x5, 0x1}, {0x3, 0x4, 0x80, 0x1000}, {0x8, 0x20, 0x5, 0x3}]}) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) 06:36:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1095.509084][ C0] sd 0:0:1:0: [sg0] tag#6607 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1095.519092][ C0] sd 0:0:1:0: [sg0] tag#6607 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 1095.622378][ C1] sd 0:0:1:0: [sg0] tag#6608 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1095.633115][ C1] sd 0:0:1:0: [sg0] tag#6608 CDB: Test Unit Ready [ 1095.639774][ C1] sd 0:0:1:0: [sg0] tag#6608 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1095.649720][ C1] sd 0:0:1:0: [sg0] tag#6608 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1095.659839][ C1] sd 0:0:1:0: [sg0] tag#6608 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1095.669767][ C1] sd 0:0:1:0: [sg0] tag#6608 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1095.679837][ C1] sd 0:0:1:0: [sg0] tag#6608 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1095.689788][ C1] sd 0:0:1:0: [sg0] tag#6608 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1095.699900][ C1] sd 0:0:1:0: [sg0] tag#6608 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1095.709876][ C1] sd 0:0:1:0: [sg0] tag#6608 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1095.719794][ C1] sd 0:0:1:0: [sg0] tag#6608 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1095.730019][ C1] sd 0:0:1:0: [sg0] tag#6608 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1095.739951][ C1] sd 0:0:1:0: [sg0] tag#6608 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1095.749826][ C1] sd 0:0:1:0: [sg0] tag#6608 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1095.759765][ C1] sd 0:0:1:0: [sg0] tag#6608 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06:36:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDMKTONE(r4, 0x4b30, 0x400) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) [ 1095.769743][ C1] sd 0:0:1:0: [sg0] tag#6608 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1095.779844][ C1] sd 0:0:1:0: [sg0] tag#6608 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:36:33 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:33 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000007e20000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') 06:36:33 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1096.407569][ C1] sd 0:0:1:0: [sg0] tag#6609 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1096.418352][ C1] sd 0:0:1:0: [sg0] tag#6609 CDB: Test Unit Ready [ 1096.425355][ C1] sd 0:0:1:0: [sg0] tag#6609 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1096.435216][ C1] sd 0:0:1:0: [sg0] tag#6609 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1096.445665][ C1] sd 0:0:1:0: [sg0] tag#6609 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1096.455512][ C1] sd 0:0:1:0: [sg0] tag#6609 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1096.465387][ C1] sd 0:0:1:0: [sg0] tag#6609 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1096.475297][ C1] sd 0:0:1:0: [sg0] tag#6609 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1096.485188][ C1] sd 0:0:1:0: [sg0] tag#6609 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1096.495052][ C1] sd 0:0:1:0: [sg0] tag#6609 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1096.505035][ C1] sd 0:0:1:0: [sg0] tag#6609 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1096.514930][ C1] sd 0:0:1:0: [sg0] tag#6609 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1096.524811][ C1] sd 0:0:1:0: [sg0] tag#6609 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1096.534764][ C1] sd 0:0:1:0: [sg0] tag#6609 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1096.544634][ C1] sd 0:0:1:0: [sg0] tag#6609 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1096.554633][ C1] sd 0:0:1:0: [sg0] tag#6609 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1096.564485][ C1] sd 0:0:1:0: [sg0] tag#6609 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:36:33 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:33 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f0000000180)=r2, 0x12) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0xbaa) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x402, 0x3f, 0x3f, 0x5}, {0x3f, 0x1, 0xb, 0x9}, {0x3f, 0x3, 0x5, 0x1}, {0x3, 0x4, 0x80, 0x1000}, {0x8, 0x20, 0x5, 0x3}]}) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) 06:36:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000140)) [ 1097.026183][ C0] sd 0:0:1:0: [sg0] tag#6610 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1097.036855][ C0] sd 0:0:1:0: [sg0] tag#6610 CDB: Test Unit Ready [ 1097.043661][ C0] sd 0:0:1:0: [sg0] tag#6610 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.053546][ C0] sd 0:0:1:0: [sg0] tag#6610 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.063523][ C0] sd 0:0:1:0: [sg0] tag#6610 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.073407][ C0] sd 0:0:1:0: [sg0] tag#6610 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.083269][ C0] sd 0:0:1:0: [sg0] tag#6610 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.093277][ C0] sd 0:0:1:0: [sg0] tag#6610 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.103173][ C0] sd 0:0:1:0: [sg0] tag#6610 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.113198][ C0] sd 0:0:1:0: [sg0] tag#6610 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.123210][ C0] sd 0:0:1:0: [sg0] tag#6610 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.133108][ C0] sd 0:0:1:0: [sg0] tag#6610 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.142984][ C0] sd 0:0:1:0: [sg0] tag#6610 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.152886][ C0] sd 0:0:1:0: [sg0] tag#6610 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.162878][ C0] sd 0:0:1:0: [sg0] tag#6610 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06:36:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x1) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) get_mempolicy(&(0x7f00000000c0), &(0x7f0000000100), 0x10000, &(0x7f0000ffb000/0x3000)=nil, 0x4) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="84000000000201040000000000000000000000003c0002802c00018014000300c21c062a398a4533d15423b10aa8c37014000400fe8000000000000000000000000000aa0c0002800500010000000000340003802c00018004000300fe880000000000000000000000000001140004000000000000000000000000000000000104000180"], 0x84}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000180)={0x2, 'vlan0\x00', {0x2}, 0x3b}) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r2, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000040)={@any, 0x400}) [ 1097.172764][ C0] sd 0:0:1:0: [sg0] tag#6610 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.182627][ C0] sd 0:0:1:0: [sg0] tag#6610 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:36:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000140)) [ 1097.819786][ C1] sd 0:0:1:0: [sg0] tag#6611 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1097.830594][ C1] sd 0:0:1:0: [sg0] tag#6611 CDB: Test Unit Ready [ 1097.837385][ C1] sd 0:0:1:0: [sg0] tag#6611 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.847384][ C1] sd 0:0:1:0: [sg0] tag#6611 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.857301][ C1] sd 0:0:1:0: [sg0] tag#6611 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.867245][ C1] sd 0:0:1:0: [sg0] tag#6611 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.877130][ C1] sd 0:0:1:0: [sg0] tag#6611 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.886995][ C1] sd 0:0:1:0: [sg0] tag#6611 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.896845][ C1] sd 0:0:1:0: [sg0] tag#6611 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.906699][ C1] sd 0:0:1:0: [sg0] tag#6611 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.916663][ C1] sd 0:0:1:0: [sg0] tag#6611 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.926646][ C1] sd 0:0:1:0: [sg0] tag#6611 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.936744][ C1] sd 0:0:1:0: [sg0] tag#6611 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.946725][ C1] sd 0:0:1:0: [sg0] tag#6611 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.956576][ C1] sd 0:0:1:0: [sg0] tag#6611 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.967057][ C1] sd 0:0:1:0: [sg0] tag#6611 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.977147][ C1] sd 0:0:1:0: [sg0] tag#6611 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 1098.015468][ T8843] __nla_validate_parse: 4 callbacks suppressed [ 1098.015497][ T8843] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 06:36:36 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') 06:36:36 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f0000000180)=r2, 0x12) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0xbaa) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x402, 0x3f, 0x3f, 0x5}, {0x3f, 0x1, 0xb, 0x9}, {0x3f, 0x3, 0x5, 0x1}, {0x3, 0x4, 0x80, 0x1000}, {0x8, 0x20, 0x5, 0x3}]}) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) 06:36:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000140)) 06:36:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) r5 = socket$inet_dccp(0x2, 0x6, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x4000, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'bridge_slave_1\x00', 0x2}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f00000000c0)={@none, 0xfffffffa}) write$9p(r4, &(0x7f0000001200)="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", 0x1000) [ 1099.053955][ C0] sd 0:0:1:0: [sg0] tag#6612 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1099.064639][ C0] sd 0:0:1:0: [sg0] tag#6612 CDB: Test Unit Ready [ 1099.071272][ C0] sd 0:0:1:0: [sg0] tag#6612 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1099.081363][ C0] sd 0:0:1:0: [sg0] tag#6612 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1099.091278][ C0] sd 0:0:1:0: [sg0] tag#6612 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1099.101418][ C0] sd 0:0:1:0: [sg0] tag#6612 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1099.111404][ C0] sd 0:0:1:0: [sg0] tag#6612 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1099.121326][ C0] sd 0:0:1:0: [sg0] tag#6612 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1099.131227][ C0] sd 0:0:1:0: [sg0] tag#6612 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1099.141121][ C0] sd 0:0:1:0: [sg0] tag#6612 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1099.151119][ C0] sd 0:0:1:0: [sg0] tag#6612 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1099.161169][ C0] sd 0:0:1:0: [sg0] tag#6612 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1099.171068][ C0] sd 0:0:1:0: [sg0] tag#6612 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1099.180972][ C0] sd 0:0:1:0: [sg0] tag#6612 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1099.190866][ C0] sd 0:0:1:0: [sg0] tag#6612 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06:36:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, 0x0) 06:36:36 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="01"], 0x1, 0x0) msgrcv(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1, 0x0, 0x0) msgsnd(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="020a48f6304f3e2d"], 0x1, 0x0) msgsnd(r2, &(0x7f0000000480)={0x3}, 0x8, 0x0) msgrcv(r2, &(0x7f00000000c0)={0x0, ""/147}, 0x9b, 0xd6d0c418f59fe7d3, 0x0) msgctl$MSG_INFO(r2, 0xc, &(0x7f00000008c0)=""/4096) io_setup(0x8, &(0x7f0000000180)=0x0) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) setsockopt$sock_int(r4, 0x1, 0x2b, &(0x7f00000000c0)=0x7, 0x4) bind$packet(r4, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="65ed59501ed8"}, 0x14) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, 0x0}]) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE_V2(r8, 0x40284504, &(0x7f00000018c0)={0x2, 0x17, 0x0, 0x20, "a7581726856bfb41d9956b94826dfeed1aa26965f83e1627b8e1c35a673acc22"}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r9, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000020b010100000000000000000300000a08000340003b0001"], 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x88000) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="840000000002010400000000000006000000009247520aaa8dbbf4a52ab098e7ebd1003c0002842c00018014000300c21c062a396c4533d154233b0aa8c37014000400fe80e0404c1bde1cb748b717d8dbd7f1b79600000000000000000000000000aa0c0002800500010000018004000300fe88000000"], 0x84}}, 0x0) r10 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x10000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r10, 0x40bc5311, &(0x7f0000000680)={0x6, 0x0, 'client1\x00', 0x3, "5bd9aade88e7125f", "834e7353580befbc87ee0cfd5c8328ca9d101367832895a09d22317f17abcecd", 0x2, 0x2}) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup3(r12, r11, 0x0) r14 = socket(0x10, 0x80000, 0xe0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000880)='/dev/mISDNtimer\x00', 0x80080, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r14, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0xf8, 0x3, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_NAT_SRC={0x78, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, @CTA_NAT_SRC={0x6c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, [], 0x21}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, [], 0x21}}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) io_submit(r3, 0x221, &(0x7f0000000200)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfff8, r0, &(0x7f0000000000)="95c252951438a5ff22fb49a92fbea961187328d1e72a0d3a20fbaf4081ed198ca0cc5918357befa46eef8cb8f8", 0x0, 0x3e}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x2, r9, &(0x7f0000000100)="d3d38bc1565f7c95c977f2ce3c528ad661414f783b3ad1285c716548ba456dcf66d5727f0aa8d712c6c3746d2c39e7f17f89019a208b718348add4e4b62fb85824a39c5f53cf017a7ad647859e9fe4ebd928f2e3fe15904d95a0ae8a0e8ff1b1d0f7bf84af8ff5c1", 0x0, 0x0, 0x0, 0x2, r13}]) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000840)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000740)={0xd4, 0x0, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_EXPECT_NAT={0xc0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, [], 0x30}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) [ 1099.200766][ C0] sd 0:0:1:0: [sg0] tag#6612 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1099.210657][ C0] sd 0:0:1:0: [sg0] tag#6612 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 1099.236304][ T8862] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1099.325206][ T8865] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_1, syncid = 2, id = 0 [ 1099.442367][ T8867] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.0'. 06:36:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSRS485(r3, 0x542f, &(0x7f0000000000)={0xfff, 0x7ddce7cb, 0x6}) syz_open_pts(r0, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0000f4000201040000000000000000070000e13b0002802c00018014000300c21c062a396c4533d15423b10aa8c37014000400fe8000000000000000000000000000aaec0002800500010000000000180003801400018008000100ac14142908000200e000000104000180"], 0x6c}}, 0x0) write(r0, &(0x7f0000001200)="00000000000000000000000000005a0e60252a8f239e44820986495a1dfd19a1433b10dcf46675037a301f96b6270964564faf6872a9fca24982493404ea80cb70ebc24ded8d7b4a52c49194d5b0ca22cb0bc02e2b0fe47543316209e2a55db1cd04ee022aa84be9e261eb642a2b8f153cf9ded1f7cfb047dee61ad9ca6ac1b4eb3461d6a673664b0ecff2a4541962a604fae894aef55f545327126748ffdd329d1a35594d2aecc3872dd40d35dd5bbdb1ecec89f93dab0cf628c99030adaabc054f076d550874d224daaa7e469c9fe42d46cfb2aa69f775074f12de49430abe4129e08e0f688d49519470ab954c41d6a2522ec8f398", 0x9) exit(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) pidfd_open(0x0, 0x0) 06:36:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, 0x0) 06:36:37 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f0000000180)=r2, 0x12) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0xbaa) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x402, 0x3f, 0x3f, 0x5}, {0x3f, 0x1, 0xb, 0x9}, {0x3f, 0x3, 0x5, 0x1}, {0x3, 0x4, 0x80, 0x1000}, {0x8, 0x20, 0x5, 0x3}]}) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) ptrace(0x4208, 0x0) 06:36:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, 0x0) 06:36:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05140000000000000000000000000900010073797a30000000002c000000180a01040000000000000000000000000c00054000130000000000000c00010073797a3000000000140000001100020000000000000000000000000a"], 0x74}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000000)={0x20, @dev={[], 0x1d}}) [ 1100.170340][ T8885] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 06:36:37 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f0000000180)=r2, 0x12) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0xbaa) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x402, 0x3f, 0x3f, 0x5}, {0x3f, 0x1, 0xb, 0x9}, {0x3f, 0x3, 0x5, 0x1}, {0x3, 0x4, 0x80, 0x1000}, {0x8, 0x20, 0x5, 0x3}]}) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) ptrace(0x4208, 0x0) [ 1100.530957][ T8894] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 06:36:37 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000ffff0000000000009820000000003b086803ffff633b27e59aa1441700006d17c3f2c876c69901000025da3f0fc7ec6e26560000080049d2e1ddf5f9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680814966ff9f2d274014ae40b88f15ff2258dd247239ece16a026ed7360627ec60cb274e00da971f7ee09aa272c56100c796d74c92fad7e34bd5f0e4542636c2cb6222bc224649282af53ba5f496b75b8a42657e0c0a475cc276304f3c1955e3e18f161d21d606f2ef2a7ec42902015d553235041a8a08a6d0310d519f61067d7e38717e69aa37681e5711a657e80950afb00e24f3f9567a61f77f817eaaa7af8e75e83aa57fb814eb65fc813258f995a0505f1baa5d318fdaee68ff2be4f913f5cc8e883f0900000000000000c5a8a00e5085b900000031f1fab4e7ffdf82c7976d6c9c3df38add503a8c3190c0ad2faca13680ed8b222373932466be1d9d67c5177d4def325bf882384442a6901ff6cdb1bfea5f6070a4f669d0866b2a8a0baea2257614dda5434b857215df1c338767ec470772b442262929f76dd12f68e6f9586df7c39e96eedc6fda493b817715b7500319b036e0812030082f53fc0c2b889d3fca4e9a8220c265e93db5ae789189f6e2305dd838db1ef858faca588cecb391f0c0f928174a191a0d2602ad687730d5f6b37d515c8778b952bc259dca116de6b533da2f744eb26693b6"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') 06:36:37 executing program 3 (fault-call:3 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000040)={0xb2, 0x0, 0x3016, 0x9509, 0xfffffffa, 0x9}) 06:36:37 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x80000000, 0x4) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x254d01, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280)='/dev/urandom\x00', 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r8, r8, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r9) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r12, r12, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r13, 0x0) r14 = clone3(&(0x7f0000001680)={0x4001100, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0}, 0x50) r15 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r15, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r15, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r8, r9, r12, r13, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r14, r15, 0x5}) mount$fuseblk(&(0x7f0000000100)='/dev/loop0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuseblk\x00', 0x2cc0028, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB="2c726f6f7430303030304a3030303030303134303030302c757365725f69643df8b11c0e4825317fd24ffc769a53bc483119eedbf04ec9b5525fec481f30be105ecc66cd467f215e3487f3341b8f4ebc7888e87a0b255f2191db3ff74525ebc5b04161a2225ba4fadffb9c477cacaeb205be9905c0dd1a4a736f4cbe5088b95af01365f77f1eee7caeaf", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=r13, @ANYBLOB=',allow_other,blksize=0x0000000000001000,default_permissions,blksize=0x0000000000001000,blksize=0x0000000000000400,dont_hash,hash,smackfshat=em1&trusted&md5sum,\x00']) getpeername$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1, 0x0, 0x0, 0x1f4}, 0x0) 06:36:37 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f0000000180)=r2, 0x12) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0xbaa) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x402, 0x3f, 0x3f, 0x5}, {0x3f, 0x1, 0xb, 0x9}, {0x3f, 0x3, 0x5, 0x1}, {0x3, 0x4, 0x80, 0x1000}, {0x8, 0x20, 0x5, 0x3}]}) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) ptrace(0x4208, 0x0) [ 1100.865458][ T8905] FAULT_INJECTION: forcing a failure. [ 1100.865458][ T8905] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1100.879133][ T8905] CPU: 0 PID: 8905 Comm: syz-executor.3 Not tainted 5.5.0-rc5-syzkaller #0 [ 1100.887876][ T8905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1100.888896][ T8905] Call Trace: [ 1100.888896][ T8905] dump_stack+0x1c9/0x220 [ 1100.888896][ T8905] should_fail+0xa4e/0xa60 [ 1100.888896][ T8905] should_fail_alloc_page+0x1e9/0x260 [ 1100.888896][ T8905] __alloc_pages_nodemask+0x3a8/0x5f60 [ 1100.888896][ T8905] ? __kernel_text_address+0x242/0x350 [ 1100.888896][ T8905] ? unwind_get_return_address+0x8c/0x130 [ 1100.888896][ T8905] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1100.888896][ T8905] ? arch_stack_walk+0x2a2/0x3e0 [ 1100.888896][ T8905] ? stack_trace_save+0x1b0/0x1b0 [ 1100.888896][ T8905] ? kmsan_get_metadata+0x11d/0x180 [ 1100.888896][ T8905] ? kmsan_get_metadata+0x11d/0x180 [ 1100.888896][ T8905] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1100.888896][ T8905] ? __update_load_avg_cfs_rq+0xfc/0x10f0 [ 1100.888896][ T8905] ? kmsan_get_metadata+0x4f/0x180 [ 1100.888896][ T8905] ? kmsan_get_metadata+0x11d/0x180 [ 1100.888896][ T8905] alloc_pages_current+0x67d/0x990 [ 1100.888896][ T8905] kmalloc_order_trace+0x8d/0x450 [ 1100.888896][ T8905] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1100.888896][ T8905] ? __msan_get_context_state+0x9/0x20 [ 1100.888896][ T8905] __kmalloc+0x305/0x450 [ 1100.888896][ T8905] ? kmsan_get_metadata+0x11d/0x180 [ 1100.888896][ T8905] ? drm_connector_property_set_ioctl+0x230/0x230 [ 1100.888896][ T8905] drm_ioctl+0x82a/0x1230 [ 1100.888896][ T8905] ? drm_connector_property_set_ioctl+0x230/0x230 [ 1100.888896][ T8905] ? kmsan_get_metadata+0x11d/0x180 [ 1100.888896][ T8905] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1100.888896][ T8905] ? drm_ioctl_kernel+0x6f0/0x6f0 [ 1100.888896][ T8905] do_vfs_ioctl+0xd88/0x3060 [ 1100.888896][ T8905] ? kmsan_get_metadata+0x11d/0x180 [ 1100.888896][ T8905] ? security_file_ioctl+0x1a8/0x200 [ 1100.888896][ T8905] __se_sys_ioctl+0x1da/0x270 [ 1100.888896][ T8905] __x64_sys_ioctl+0x4a/0x70 [ 1100.888896][ T8905] do_syscall_64+0xb8/0x160 [ 1100.888896][ T8905] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1100.888896][ T8905] RIP: 0033:0x45b349 [ 1100.888896][ T8905] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1100.888896][ T8905] RSP: 002b:00007ff4f31bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1100.888896][ T8905] RAX: ffffffffffffffda RBX: 00007ff4f31bf6d4 RCX: 000000000045b349 [ 1100.888896][ T8905] RDX: 0000000020000140 RSI: fffffbfffff3ffa7 RDI: 0000000000000003 [ 1100.888896][ T8905] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1100.888896][ T8905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1100.888896][ T8905] R13: 00000000000001fe R14: 00000000004c2cfa R15: 0000000000000000 [ 1101.193109][ C0] sd 0:0:1:0: [sg0] tag#6620 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1101.203814][ C0] sd 0:0:1:0: [sg0] tag#6620 CDB: Test Unit Ready [ 1101.210532][ C0] sd 0:0:1:0: [sg0] tag#6620 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1101.221002][ C0] sd 0:0:1:0: [sg0] tag#6620 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1101.230888][ C0] sd 0:0:1:0: [sg0] tag#6620 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1101.240878][ C0] sd 0:0:1:0: [sg0] tag#6620 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1101.251061][ C0] sd 0:0:1:0: [sg0] tag#6620 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1101.261059][ C0] sd 0:0:1:0: [sg0] tag#6620 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1101.271054][ C0] sd 0:0:1:0: [sg0] tag#6620 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1101.280979][ C0] sd 0:0:1:0: [sg0] tag#6620 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1101.291035][ C0] sd 0:0:1:0: [sg0] tag#6620 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1101.300907][ C0] sd 0:0:1:0: [sg0] tag#6620 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1101.310888][ C0] sd 0:0:1:0: [sg0] tag#6620 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1101.320783][ C0] sd 0:0:1:0: [sg0] tag#6620 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1101.330927][ C0] sd 0:0:1:0: [sg0] tag#6620 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1101.340807][ C0] sd 0:0:1:0: [sg0] tag#6620 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1101.350819][ C0] sd 0:0:1:0: [sg0] tag#6620 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:36:38 executing program 3 (fault-call:3 fault-nth:1): r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1101.571866][ T8921] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1101.758352][ T8929] FAULT_INJECTION: forcing a failure. [ 1101.758352][ T8929] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1101.762014][ T8929] CPU: 0 PID: 8929 Comm: syz-executor.3 Not tainted 5.5.0-rc5-syzkaller #0 [ 1101.762014][ T8929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1101.762014][ T8929] Call Trace: [ 1101.762014][ T8929] dump_stack+0x1c9/0x220 [ 1101.762014][ T8929] should_fail+0xa4e/0xa60 [ 1101.762014][ T8929] should_fail_alloc_page+0x1e9/0x260 [ 1101.762014][ T8929] __alloc_pages_nodemask+0x3a8/0x5f60 [ 1101.762014][ T8929] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1101.762014][ T8929] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1101.762014][ T8929] ? kernel_poison_pages+0x355/0x3a0 [ 1101.762014][ T8929] ? kmsan_get_metadata+0x11d/0x180 [ 1101.762014][ T8929] ? kmsan_get_shadow_origin_ptr+0x6c/0xb0 [ 1101.762014][ T8929] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1101.762014][ T8929] ? prep_new_page+0x84d/0x9c0 [ 1101.762014][ T8929] ? get_page_from_freelist+0x11a9/0x1a10 [ 1101.762014][ T8929] ? kmsan_get_metadata+0x11d/0x180 [ 1101.762014][ T8929] kmsan_alloc_page+0xa8/0x310 [ 1101.762014][ T8929] __alloc_pages_nodemask+0x57f2/0x5f60 [ 1101.762014][ T8929] ? __kernel_text_address+0x242/0x350 [ 1101.762014][ T8929] ? unwind_get_return_address+0x8c/0x130 [ 1101.762014][ T8929] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1101.762014][ T8929] ? arch_stack_walk+0x2a2/0x3e0 [ 1101.762014][ T8929] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 1101.762014][ T8929] ? stack_trace_save+0x128/0x1b0 [ 1101.762014][ T8929] ? kmsan_get_metadata+0x4f/0x180 [ 1101.762014][ T8929] ? kmsan_get_metadata+0x11d/0x180 [ 1101.762014][ T8929] alloc_pages_current+0x67d/0x990 [ 1101.762014][ T8929] kmalloc_order_trace+0x8d/0x450 [ 1101.762014][ T8929] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1101.762014][ T8929] ? __msan_get_context_state+0x9/0x20 [ 1101.762014][ T8929] __kmalloc+0x305/0x450 [ 1101.762014][ T8929] ? kmsan_get_metadata+0x11d/0x180 [ 1101.762014][ T8929] ? drm_connector_property_set_ioctl+0x230/0x230 [ 1101.762014][ T8929] drm_ioctl+0x82a/0x1230 [ 1101.762014][ T8929] ? drm_connector_property_set_ioctl+0x230/0x230 [ 1101.762014][ T8929] ? kmsan_get_metadata+0x11d/0x180 [ 1101.762014][ T8929] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1101.762014][ T8929] ? drm_ioctl_kernel+0x6f0/0x6f0 [ 1101.762014][ T8929] do_vfs_ioctl+0xd88/0x3060 [ 1101.762014][ T8929] ? kmsan_get_metadata+0x11d/0x180 [ 1101.762014][ T8929] ? security_file_ioctl+0x1a8/0x200 [ 1101.762014][ T8929] __se_sys_ioctl+0x1da/0x270 [ 1101.762014][ T8929] __x64_sys_ioctl+0x4a/0x70 [ 1101.762014][ T8929] do_syscall_64+0xb8/0x160 [ 1101.762014][ T8929] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1101.762014][ T8929] RIP: 0033:0x45b349 [ 1101.762014][ T8929] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1101.762014][ T8929] RSP: 002b:00007ff4f31bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1101.762014][ T8929] RAX: ffffffffffffffda RBX: 00007ff4f31bf6d4 RCX: 000000000045b349 [ 1101.762014][ T8929] RDX: 0000000020000140 RSI: fffffbfffff3ffa7 RDI: 0000000000000003 [ 1101.762014][ T8929] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1101.762014][ T8929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1101.762014][ T8929] R13: 00000000000001fe R14: 00000000004c2cfa R15: 0000000000000001 06:36:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000040)={0x9, 0xc, 0x4, 0x20000, 0x8, {0x77359400}, {0x2, 0x0, 0xff, 0x3f, 0x1, 0x4, "67d1075b"}, 0xfffeffff, 0x2, @userptr=0x1, 0x7f, 0x0, 0xffffffffffffffff}) ioctl$TIOCSIG(r4, 0x40045436, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x3, 0xfc) setsockopt$inet6_opts(r5, 0x29, 0x3b, &(0x7f00000000c0)=@srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x40}, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r5, r6, 0x0, 0xa808) [ 1102.114076][ C1] sd 0:0:1:0: [sg0] tag#6621 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1102.124863][ C1] sd 0:0:1:0: [sg0] tag#6621 CDB: Test Unit Ready [ 1102.131497][ C1] sd 0:0:1:0: [sg0] tag#6621 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.141451][ C1] sd 0:0:1:0: [sg0] tag#6621 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.151359][ C1] sd 0:0:1:0: [sg0] tag#6621 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.161343][ C1] sd 0:0:1:0: [sg0] tag#6621 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.171285][ C1] sd 0:0:1:0: [sg0] tag#6621 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.181407][ C1] sd 0:0:1:0: [sg0] tag#6621 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.191310][ C1] sd 0:0:1:0: [sg0] tag#6621 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.201479][ C1] sd 0:0:1:0: [sg0] tag#6621 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.211384][ C1] sd 0:0:1:0: [sg0] tag#6621 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.221314][ C1] sd 0:0:1:0: [sg0] tag#6621 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.231212][ C1] sd 0:0:1:0: [sg0] tag#6621 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.241133][ C1] sd 0:0:1:0: [sg0] tag#6621 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.250990][ C1] sd 0:0:1:0: [sg0] tag#6621 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.262203][ C1] sd 0:0:1:0: [sg0] tag#6621 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1102.272155][ C1] sd 0:0:1:0: [sg0] tag#6621 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:36:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000080)=[0x800, 0x9], 0x2, 0x10000, 0x29, 0x5, 0x80, 0x0, 0x7, {0x3, 0xfffe, 0x1ff, 0x4, 0x1, 0x800, 0x7, 0xce8, 0x1, 0x3, 0x6, 0x1, 0xffffff24, 0x47, "0ca81ce5f9d5e93a81f8fe55d997c0cd04484ffd895210a391550230f1f52377"}}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) 06:36:39 executing program 3 (fault-call:3 fault-nth:2): r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:39 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="dd68000000000000009053b2be9f"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1102.681535][ T8943] FAULT_INJECTION: forcing a failure. [ 1102.681535][ T8943] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1102.682446][ T8943] CPU: 1 PID: 8943 Comm: syz-executor.3 Not tainted 5.5.0-rc5-syzkaller #0 [ 1102.682446][ T8943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1102.682446][ T8943] Call Trace: [ 1102.682446][ T8943] dump_stack+0x1c9/0x220 [ 1102.682446][ T8943] should_fail+0xa4e/0xa60 [ 1102.682446][ T8943] should_fail_alloc_page+0x1e9/0x260 [ 1102.682446][ T8943] __alloc_pages_nodemask+0x3a8/0x5f60 [ 1102.682446][ T8943] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1102.682446][ T8943] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1102.682446][ T8943] ? kernel_poison_pages+0x355/0x3a0 [ 1102.682446][ T8943] ? kmsan_get_metadata+0x11d/0x180 [ 1102.682446][ T8943] ? kmsan_get_shadow_origin_ptr+0x6c/0xb0 [ 1102.682446][ T8943] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1102.682446][ T8943] ? get_page_from_freelist+0x11a9/0x1a10 [ 1102.682446][ T8943] kmsan_alloc_page+0x108/0x310 [ 1102.682446][ T8943] __alloc_pages_nodemask+0x57f2/0x5f60 [ 1102.682446][ T8943] ? __kernel_text_address+0x242/0x350 [ 1102.682446][ T8943] ? unwind_get_return_address+0x8c/0x130 [ 1102.682446][ T8943] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1102.682446][ T8943] ? arch_stack_walk+0x2a2/0x3e0 [ 1102.682446][ T8943] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 1102.682446][ T8943] ? stack_trace_save+0x128/0x1b0 [ 1102.682446][ T8943] ? kmsan_get_metadata+0x4f/0x180 [ 1102.682446][ T8943] ? kmsan_get_metadata+0x11d/0x180 [ 1102.682446][ T8943] alloc_pages_current+0x67d/0x990 [ 1102.682446][ T8943] kmalloc_order_trace+0x8d/0x450 [ 1102.682446][ T8943] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1102.682446][ T8943] ? __msan_get_context_state+0x9/0x20 [ 1102.682446][ T8943] __kmalloc+0x305/0x450 [ 1102.682446][ T8943] ? kmsan_get_metadata+0x11d/0x180 [ 1102.682446][ T8943] ? drm_connector_property_set_ioctl+0x230/0x230 [ 1102.682446][ T8943] drm_ioctl+0x82a/0x1230 [ 1102.682446][ T8943] ? drm_connector_property_set_ioctl+0x230/0x230 [ 1102.682446][ T8943] ? kmsan_get_metadata+0x11d/0x180 [ 1102.682446][ T8943] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1102.682446][ T8943] ? drm_ioctl_kernel+0x6f0/0x6f0 [ 1102.682446][ T8943] do_vfs_ioctl+0xd88/0x3060 [ 1102.682446][ T8943] ? kmsan_get_metadata+0x11d/0x180 [ 1102.682446][ T8943] ? security_file_ioctl+0x1a8/0x200 [ 1102.682446][ T8943] __se_sys_ioctl+0x1da/0x270 [ 1102.682446][ T8943] __x64_sys_ioctl+0x4a/0x70 [ 1102.682446][ T8943] do_syscall_64+0xb8/0x160 [ 1102.682446][ T8943] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1102.682446][ T8943] RIP: 0033:0x45b349 [ 1102.682446][ T8943] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1102.682446][ T8943] RSP: 002b:00007ff4f319dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1102.682446][ T8943] RAX: ffffffffffffffda RBX: 00007ff4f319e6d4 RCX: 000000000045b349 [ 1102.682446][ T8943] RDX: 0000000020000140 RSI: fffffbfffff3ffa7 RDI: 0000000000000003 [ 1102.682446][ T8943] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1102.682446][ T8943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1102.682446][ T8943] R13: 00000000000001fe R14: 00000000004c2cfa R15: 0000000000000002 [ 1103.104697][ C1] sd 0:0:1:0: [sg0] tag#6622 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1103.115477][ C1] sd 0:0:1:0: [sg0] tag#6622 CDB: Test Unit Ready [ 1103.122408][ C1] sd 0:0:1:0: [sg0] tag#6622 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1103.134534][ C1] sd 0:0:1:0: [sg0] tag#6622 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1103.144527][ C1] sd 0:0:1:0: [sg0] tag#6622 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1103.154401][ C1] sd 0:0:1:0: [sg0] tag#6622 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1103.164355][ C1] sd 0:0:1:0: [sg0] tag#6622 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1103.174242][ C1] sd 0:0:1:0: [sg0] tag#6622 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1103.184160][ C1] sd 0:0:1:0: [sg0] tag#6622 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1103.194053][ C1] sd 0:0:1:0: [sg0] tag#6622 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1103.204074][ C1] sd 0:0:1:0: [sg0] tag#6622 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1103.213993][ C1] sd 0:0:1:0: [sg0] tag#6622 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1103.224662][ C1] sd 0:0:1:0: [sg0] tag#6622 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1103.234519][ C1] sd 0:0:1:0: [sg0] tag#6622 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1103.244501][ C1] sd 0:0:1:0: [sg0] tag#6622 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1103.254365][ C1] sd 0:0:1:0: [sg0] tag#6622 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1103.264621][ C1] sd 0:0:1:0: [sg0] tag#6622 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:36:40 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f0000000180)=r2, 0x12) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0xbaa) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) ptrace(0x4208, r4) 06:36:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x23, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r6 = open(&(0x7f00000012c0)='./file0\x00', 0x290601, 0x60) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x9}) r7 = syz_open_pts(r5, 0x1) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000001200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r8, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xded}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x0) write(r7, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) [ 1103.550329][ T8952] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1103.932837][ C1] sd 0:0:1:0: [sg0] tag#6623 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1103.943516][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB: Test Unit Ready [ 1103.950172][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1103.960625][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1103.970662][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1103.980682][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1103.990556][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.000503][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.010377][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.020334][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.030271][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.040186][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.050104][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.060057][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.069913][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06:36:41 executing program 3 (fault-call:3 fault-nth:3): r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 1104.079825][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.089708][ C1] sd 0:0:1:0: [sg0] tag#6623 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:36:41 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f0000000180)=r2, 0x12) getpgrp(0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) ptrace(0x4208, r3) 06:36:41 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x13, r0, 0xdc1e4000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x181000, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000640)={0x6, &(0x7f0000000100)=""/97, &(0x7f0000000580)=[{0x80000001, 0x89, 0x20, &(0x7f0000000180)=""/137}, {0x8, 0x44, 0xffffffe0, &(0x7f0000000240)=""/68}, {0x0, 0xca, 0x8, &(0x7f00000002c0)=""/202}, {0x0, 0x96, 0x3b7, &(0x7f00000003c0)=""/150}, {0x0, 0x82, 0x2, &(0x7f0000000480)=""/130}, {0x4, 0x2c, 0xfff, &(0x7f0000000540)=""/44}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$inet_udp(0x2, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r5, 0xc040564b, &(0x7f0000000040)={0x4445, 0x0, 0x2006, 0x8001, 0x10000, {0x1f, 0x7fffffff}}) setsockopt$inet_udp_int(r2, 0x11, 0xb, &(0x7f0000000000), 0x1fc) 06:36:41 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000ffff0000000000009820000000003b086803ffff633b27e59aa14417000000006d17c3f2c876c69901000025da3f0fc7ec6e26560000080049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680814966ff9f2d274014ae40b88f15ff2258dd247239ece16a61fd063f026ed7360627ec60cb274e00da971f7ee09aa272c56100c796d74c92fad7e34bd5f0e4542636c2cb6222bc224649282af53ba5f496b75b8a42657e0c0a675cc276304f3c1955e3e18f161d21d606f2ef2a7ec42902015d553235041a8a08a6d0470d519f61067d7e38717e69aa37681e5711a657e80950afb00e24f3f9567a61f77f817eaaa7af8e75e847a57fb014eb65fc813258f995a0505f1baa5d318fdaee68ff2be4f913f5cc8e883f0900000000000000c5a8a00e5085b900"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3b00000002000000f203000000000000000003000000000f"]}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 1104.371373][ T8969] FAULT_INJECTION: forcing a failure. [ 1104.371373][ T8969] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1104.385502][ T8969] CPU: 0 PID: 8969 Comm: syz-executor.3 Not tainted 5.5.0-rc5-syzkaller #0 [ 1104.394158][ T8969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1104.395695][ T8969] Call Trace: [ 1104.395695][ T8969] dump_stack+0x1c9/0x220 [ 1104.395695][ T8969] should_fail+0xa4e/0xa60 [ 1104.395695][ T8969] should_fail_alloc_page+0x1e9/0x260 [ 1104.395695][ T8969] __alloc_pages_nodemask+0x3a8/0x5f60 [ 1104.395695][ T8969] ? kmsan_task_context_state+0x47/0x90 [ 1104.395695][ T8969] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1104.395695][ T8969] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1104.395695][ T8969] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1104.395695][ T8969] ? update_stack_state+0x9aa/0xab0 [ 1104.395695][ T8969] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1104.395695][ T8969] ? __module_address+0x68/0x600 [ 1104.395695][ T8969] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1104.395695][ T8969] ? is_bpf_text_address+0x3ea/0x420 [ 1104.395695][ T8969] ? kmsan_get_metadata+0x11d/0x180 [ 1104.395695][ T8969] alloc_pages_vma+0xc68/0x1870 [ 1104.395695][ T8969] wp_page_copy+0x314/0x2dc0 [ 1104.491605][ T8969] ? kmsan_get_metadata+0x4f/0x180 [ 1104.500379][ C1] sd 0:0:1:0: [sg0] tag#6624 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1104.491605][ T8969] ? kmsan_get_metadata+0x4f/0x180 [ 1104.511211][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB: Test Unit Ready [ 1104.516166][ T8969] ? kmsan_get_metadata+0x11d/0x180 [ 1104.516166][ T8969] ? kmsan_get_metadata+0x11d/0x180 [ 1104.516166][ T8969] do_wp_page+0x1c74/0x3070 [ 1104.522964][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.516166][ T8969] ? kmsan_get_metadata+0x4f/0x180 [ 1104.533424][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.516166][ T8969] ? kmsan_get_metadata+0x4f/0x180 [ 1104.516166][ T8969] ? kmsan_set_origin_checked+0x95/0xf0 [ 1104.516166][ T8969] handle_mm_fault+0x48bb/0x9de0 [ 1104.547798][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.516166][ T8969] do_user_addr_fault+0xb30/0x1520 [ 1104.516166][ T8969] ? kmsan_set_origin_checked+0x95/0xf0 [ 1104.562646][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.516166][ T8969] __do_page_fault+0x18f/0x400 [ 1104.574360][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.516166][ T8969] do_page_fault+0xbb/0x4e0 [ 1104.588970][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.516166][ T8969] ? kmsan_unpoison_pt_regs+0x29/0x30 [ 1104.516166][ T8969] page_fault+0x4e/0x60 [ 1104.599652][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.516166][ T8969] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 1104.516166][ T8969] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 1104.516166][ T8969] RSP: 0018:ffffaf869575bb10 EFLAGS: 00010202 [ 1104.614456][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.516166][ T8969] RAX: ffffffff84a5fd79 RBX: ffff9139a0b3e550 RCX: 0000000000003133 [ 1104.516166][ T8969] RDX: 0000000000003ff3 RSI: ffff913aa496cec0 RDI: 0000000020001000 [ 1104.516166][ T8969] RBP: ffffaf869575bb80 R08: ffffef804000000f R09: ffff913a6fffb000 [ 1104.516166][ T8969] R10: 0000000000000004 R11: 0000000000000000 R12: ffff913aa496c000 [ 1104.628716][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.516166][ T8969] R13: ffffaf869575bb18 R14: 0000000020000140 R15: 0000000000003ff3 [ 1104.516166][ T8969] ? _copy_to_user+0x10c/0x1f0 [ 1104.516166][ T8969] drm_ioctl+0xceb/0x1230 [ 1104.643953][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.516166][ T8969] ? drm_connector_property_set_ioctl+0x230/0x230 [ 1104.657752][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.516166][ T8969] ? kmsan_get_metadata+0x11d/0x180 [ 1104.516166][ T8969] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1104.516166][ T8969] ? drm_ioctl_kernel+0x6f0/0x6f0 [ 1104.684253][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.516166][ T8969] do_vfs_ioctl+0xd88/0x3060 [ 1104.700177][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.516166][ T8969] ? kmsan_get_metadata+0x11d/0x180 [ 1104.516166][ T8969] ? security_file_ioctl+0x1a8/0x200 [ 1104.516166][ T8969] __se_sys_ioctl+0x1da/0x270 [ 1104.516166][ T8969] __x64_sys_ioctl+0x4a/0x70 [ 1104.716433][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.516166][ T8969] do_syscall_64+0xb8/0x160 [ 1104.516166][ T8969] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1104.516166][ T8969] RIP: 0033:0x45b349 [ 1104.732604][ C1] sd 0:0:1:0: [sg0] tag#6624 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 1104.516166][ T8969] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1104.516166][ T8969] RSP: 002b:00007ff4f31bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1104.516166][ T8969] RAX: ffffffffffffffda RBX: 00007ff4f31bf6d4 RCX: 000000000045b349 [ 1104.516166][ T8969] RDX: 0000000020000140 RSI: fffffbfffff3ffa7 RDI: 0000000000000003 [ 1104.758150][ T8969] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1104.758150][ T8969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1104.758150][ T8969] R13: 00000000000001fe R14: 00000000004c2cfa R15: 0000000000000003 [ 1104.997203][ T8976] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 06:36:42 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f0000000180)=r2, 0x12) getpgrp(0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) ptrace(0x4208, r3) [ 1105.403145][ T8992] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 06:36:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r4, 0x541c, &(0x7f0000000040)={0x6, 0x8}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r5 = syz_open_pts(r0, 0x1) write(r5, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) r6 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r7 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r7) keyctl$search(0xa, r7, &(0x7f0000000100)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0) r8 = add_key$keyring(&(0x7f0000001200)='keyring\x00', &(0x7f0000001240)={'syz', 0x3}, 0x0, 0x0, r7) keyctl$search(0xa, r6, &(0x7f0000000100)='trusted\x00', &(0x7f0000000180)={'syz', 0x1}, r8) [ 1105.583012][ C1] sd 0:0:1:0: [sg0] tag#6625 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1105.593654][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB: Test Unit Ready [ 1105.600283][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1105.610321][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1105.620183][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1105.630261][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1105.640140][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1105.650126][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1105.660013][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1105.669931][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1105.679806][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1105.689701][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1105.700068][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1105.710368][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1105.720239][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1105.730173][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1105.740040][ C1] sd 0:0:1:0: [sg0] tag#6625 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:36:43 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) write$P9_RWRITE(r0, &(0x7f0000000000)={0xb}, 0xb) ftruncate(r0, 0x88001) r1 = socket(0x2, 0x803, 0x5) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffdfffe) 06:36:43 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f0000000180)=r2, 0x12) getpgrp(0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) ptrace(0x4208, r3) [ 1106.143023][ T9005] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 06:36:43 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e1f, @remote}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x78) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCGETX(0xffffffffffffffff, 0x5432, 0x0) pipe(0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x2d000, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) splice(r7, 0x0, r8, 0x0, 0x18, 0x0) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r9, 0x83) [ 1106.391575][ C1] sd 0:0:1:0: [sg0] tag#6626 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1106.402292][ C1] sd 0:0:1:0: [sg0] tag#6626 CDB: Test Unit Ready [ 1106.408934][ C1] sd 0:0:1:0: [sg0] tag#6626 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.418869][ C1] sd 0:0:1:0: [sg0] tag#6626 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.428871][ C1] sd 0:0:1:0: [sg0] tag#6626 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.438803][ C1] sd 0:0:1:0: [sg0] tag#6626 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.448680][ C1] sd 0:0:1:0: [sg0] tag#6626 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.458582][ C1] sd 0:0:1:0: [sg0] tag#6626 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.468445][ C1] sd 0:0:1:0: [sg0] tag#6626 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.478538][ C1] sd 0:0:1:0: [sg0] tag#6626 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.488424][ C1] sd 0:0:1:0: [sg0] tag#6626 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.498311][ C1] sd 0:0:1:0: [sg0] tag#6626 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.508759][ C1] sd 0:0:1:0: [sg0] tag#6626 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.518645][ C1] sd 0:0:1:0: [sg0] tag#6626 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.528501][ C1] sd 0:0:1:0: [sg0] tag#6626 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.538396][ C1] sd 0:0:1:0: [sg0] tag#6626 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1106.548243][ C1] sd 0:0:1:0: [sg0] tag#6626 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:36:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="01"], 0x1, 0x0) msgrcv(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1, 0x0, 0x0) msgsnd(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="020a48f6304f3e2d"], 0x1, 0x0) msgsnd(r2, &(0x7f0000000480)={0x3}, 0x8, 0x0) msgrcv(r2, &(0x7f00000000c0)={0x0, ""/147}, 0x9b, 0xd6d0c418f59fe7d3, 0x0) msgctl$MSG_STAT_ANY(r2, 0xd, &(0x7f0000000080)=""/123) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="01"], 0x1, 0x0) msgrcv(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1, 0x0, 0x0) msgsnd(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="020a48f6304f3e2d"], 0x1, 0x0) msgsnd(r3, &(0x7f0000000480)={0x3}, 0x8, 0x0) msgrcv(r3, &(0x7f00000000c0)={0x0, ""/147}, 0x9b, 0xd6d0c418f59fe7d3, 0x0) msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000180)) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000b40)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000020040000a0010000a001000000000000a0010000a00100008803000088030000880300008803000088030000030000000000000000000000ac141400ac1e00010000000000000000626f6e645f736c6176655f310000000073797a6b616c6c657230000000000000000000000000000000000000000000000000000000000000000000000000000000000034000000005801a0010000000000000206000000000000000000000000c800636f6e6e747261636b000000000000000000000000000000000000000003e000000200000000000000000000000081800000ffffffffff000000ffffff00e000000200000000000000000000000000000000ffffffffff000000ffffffffe0000001000000000000000000000000ff000000ffffffff00000000000000ff00000000000000000000000000000000ff000000000000ffffffff00000000ff04000000980000003b004e204e244e214e220020c201010102004e234e244e234e230000000000002000736f636b6574000000000000000000000000000000000000000000000000480049444c4554494d45520000000000000000000000000000000000000000003f00000073797a300000000000000000000000000000000000000000000000000000000000000000ac1414aae000000100000000000000006261746164765f736c6176655f3000006e723000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000c801e80100000000000000000000000000000000000000005801686173686c696d69740000000000000000000000000000000000000000036272696467655f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000ff7f00000800000000000000000000000000000000000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 06:36:43 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f0000000180)=r2, 0x12) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xbaa) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) ptrace(0x4208, r3) 06:36:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) r2 = socket$inet(0xa, 0x801, 0x84) sendmsg$inet(r2, &(0x7f00000026c0)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x81e}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000002c0)="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", 0x1c5}], 0x1}, 0x0) listen(r2, 0x3) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000480)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000780)={r5, 0x70, "2f00e812e554d8fdb595f40ac122b26a09e2261c8b16033625fa0c9be4be7fbfcedb2f1066f5b7ed3dce5e4175bc78985a34e1444b8f73a669e77ce516fb931540e3786b57befd8a77958168ac1e6b61f22e34b37391b83f72df04e1a3c441eed5cfe3fb5ea1bc321b1c62bdc7a596d3"}, &(0x7f0000000140)=0x78) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={r5, 0x7}, 0x8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r6 = syz_open_pts(r0, 0x1) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) [ 1106.873230][ T9022] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1106.995712][ C1] sd 0:0:1:0: [sg0] tag#6627 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1107.006424][ C1] sd 0:0:1:0: [sg0] tag#6627 CDB: Test Unit Ready [ 1107.013273][ C1] sd 0:0:1:0: [sg0] tag#6627 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1107.023246][ C1] sd 0:0:1:0: [sg0] tag#6627 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1107.033122][ C1] sd 0:0:1:0: [sg0] tag#6627 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1107.042994][ C1] sd 0:0:1:0: [sg0] tag#6627 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1107.052852][ C1] sd 0:0:1:0: [sg0] tag#6627 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1107.062688][ C1] sd 0:0:1:0: [sg0] tag#6627 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1107.072544][ C1] sd 0:0:1:0: [sg0] tag#6627 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1107.082385][ C1] sd 0:0:1:0: [sg0] tag#6627 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1107.092240][ C1] sd 0:0:1:0: [sg0] tag#6627 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1107.102246][ C1] sd 0:0:1:0: [sg0] tag#6627 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1107.112114][ C1] sd 0:0:1:0: [sg0] tag#6627 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1107.121867][ C1] sd 0:0:1:0: [sg0] tag#6627 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1107.131804][ C1] sd 0:0:1:0: [sg0] tag#6627 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1107.141654][ C1] sd 0:0:1:0: [sg0] tag#6627 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1107.151549][ C1] sd 0:0:1:0: [sg0] tag#6627 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:36:44 executing program 3 (fault-call:3 fault-nth:4): r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 06:36:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r4, 0x541c, &(0x7f0000000040)={0x6, 0x8}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r5 = syz_open_pts(r0, 0x1) write(r5, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) r6 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r7 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r7) keyctl$search(0xa, r7, &(0x7f0000000100)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0) r8 = add_key$keyring(&(0x7f0000001200)='keyring\x00', &(0x7f0000001240)={'syz', 0x3}, 0x0, 0x0, r7) keyctl$search(0xa, r6, &(0x7f0000000100)='trusted\x00', &(0x7f0000000180)={'syz', 0x1}, r8) 06:36:44 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x40, 0x0, 0x1, 0x0, 0x1000000008001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1fc2, 0xff}, 0x0, 0x100, 0x420, 0x0, 0xa484}, 0x0, 0x1, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x149) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007600)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c80)={&(0x7f0000007c00)={0x14, r4, 0x353fa4e24d4668dd}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000010", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250300000014000100000000000000000000000000000000010c0004000002000008000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r5, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000480)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xbc73, @empty, 0xffff}, @in={0x2, 0x0, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xe6, @dev, 0x2}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @broadcast}], 0x84) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f2}, {}]}}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') 06:36:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_bp={0xffffffffffffffff, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x73b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "4ed53c7c80db64ed8e0e729de64297e41c09000000eb8c305e078064f15e36b00dcf22cc1318b29a265880a2d6102e17fea8f5b056ef3e11eb73d5f860e14fde"}, 0x48}, 0x1, 0x0, 0x0, 0x48001}, 0x0) ioctl(r1, 0x94002, &(0x7f00000001c0)="bc0ebb491638a3b79b6f5bc417763eb34ecc2f071f14fd4da74af4b3764f572733d342f7b309c02627f3813890ebe71aeee9b86a43f79d780987585093d0e0d56f702a808f98410c117a2a813cf19c96ebe78505e2bd2d5f2b40822b659de2848a09553dc02cbb340f0432a49cdfa0d503cb434ce8a1ab38f9b43a90932e8370e7b51e36c5f4e7cd6e14da9bdcd3") clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000000)={0xfffffffffffffffa, 0x0, 0x2, 0x4}) r6 = socket(0x10, 0x3, 0x0) r7 = open(&(0x7f0000000380)='./file0\x00', 0x4842, 0x4a) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0x7f, 0x9d, 0x3}, 0x10) write(r6, &(0x7f0000000080)="240000001a005f0214f9f4070009040802000000000100010000000008000f00fe000000", 0x24) getsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000000c0)={0x1, r5}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r12, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r12, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r12, @ANYBLOB="0000000000000000f1ff00000c00010074630e3a3aeefffb5532696e64657800040002005c3fb98549"], 0x34}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={@loopback, @loopback, @mcast1, 0x9, 0x6, 0x5, 0x400, 0x8001, 0x80020010, r12}) 06:36:44 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="c21c062a396c4533d15423b10aa8c370"}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x84}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f0000000180)=r2, 0x12) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xbaa) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0xeb, 0x0) ptrace(0x4208, r3) [ 1107.484345][ C1] sd 0:0:1:0: [sg0] tag#6628 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1107.495075][ C1] sd 0:0:1:0: [sg0] tag#6628 CDB: Test Unit Ready [ 1107.501772][ C1] sd 0:0:1:0: [sg0] tag#6628 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1107.506478][ T9038] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1107.511621][ C1] sd 0:0:1:0: [sg0] tag#6628 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1107.530976][ C1] sd 0:0:1:0: [sg0] tag#6628 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1107.540817][ C1] sd 0:0:1:0: [sg0] tag#6628 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1107.550660][ C1] sd 0:0:1:0: [sg0] tag#6628 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1107.562163][ C1] sd 0:0:1:0: [sg0] tag#6628 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1107.571919][ C1] sd 0:0:1:0: [sg0] tag#6628 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1107.581781][ C1] sd 0:0:1:0: [sg0] tag#6628 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1107.591642][ C1] sd 0:0:1:0: [sg0] tag#6628 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1107.601517][ C1] sd 0:0:1:0: [sg0] tag#6628 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1107.607838][ T9041] FAULT_INJECTION: forcing a failure. [ 1107.607838][ T9041] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1107.611392][ C1] sd 0:0:1:0: [sg0] tag#6628 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1107.612062][ T9041] CPU: 0 PID: 9041 Comm: syz-executor.3 Not tainted 5.5.0-rc5-syzkaller #0 [ 1107.612062][ T9041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1107.612062][ T9041] Call Trace: [ 1107.612062][ T9041] dump_stack+0x1c9/0x220 [ 1107.612062][ T9041] should_fail+0xa4e/0xa60 [ 1107.634383][ C1] sd 0:0:1:0: [sg0] tag#6628 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1107.612062][ T9041] should_fail_alloc_page+0x1e9/0x260 [ 1107.612062][ T9041] __alloc_pages_nodemask+0x3a8/0x5f60 [ 1107.612062][ T9041] ? kmsan_get_metadata+0x11d/0x180 [ 1107.612062][ T9041] ? kmsan_set_origin_checked+0x95/0xf0 [ 1107.612062][ T9041] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1107.612062][ T9041] ? kmsan_get_metadata+0x11d/0x180 [ 1107.653278][ C1] sd 0:0:1:0: [sg0] tag#6628 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1107.612062][ T9041] ? kmsan_get_shadow_origin_ptr+0x6c/0xb0 [ 1107.660816][ C1] sd 0:0:1:0: [sg0] tag#6628 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1107.612062][ T9041] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1107.612062][ T9041] ? prep_new_page+0x84d/0x9c0 [ 1107.612062][ T9041] ? get_page_from_freelist+0x11a9/0x1a10 [ 1107.612062][ T9041] kmsan_alloc_page+0xa8/0x310 [ 1107.612062][ T9041] __alloc_pages_nodemask+0x57f2/0x5f60 [ 1107.612062][ T9041] ? kmsan_task_context_state+0x47/0x90 [ 1107.674970][ C1] sd 0:0:1:0: [sg0] tag#6628 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 1107.612062][ T9041] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1107.612062][ T9041] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1107.612062][ T9041] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1107.612062][ T9041] ? update_stack_state+0x9aa/0xab0 [ 1107.612062][ T9041] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1107.612062][ T9041] ? __module_address+0x68/0x600 [ 1107.612062][ T9041] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1107.612062][ T9041] ? is_bpf_text_address+0x3ea/0x420 [ 1107.612062][ T9041] ? kmsan_get_metadata+0x11d/0x180 [ 1107.612062][ T9041] alloc_pages_vma+0xc68/0x1870 [ 1107.612062][ T9041] wp_page_copy+0x314/0x2dc0 [ 1107.612062][ T9041] ? kmsan_get_metadata+0x4f/0x180 [ 1107.612062][ T9041] ? kmsan_get_metadata+0x4f/0x180 [ 1107.612062][ T9041] ? kmsan_get_metadata+0x11d/0x180 [ 1107.612062][ T9041] ? kmsan_get_metadata+0x11d/0x180 [ 1107.612062][ T9041] do_wp_page+0x1c74/0x3070 [ 1107.612062][ T9041] ? kmsan_get_metadata+0x4f/0x180 [ 1107.612062][ T9041] ? kmsan_get_metadata+0x4f/0x180 [ 1107.612062][ T9041] ? kmsan_set_origin_checked+0x95/0xf0 [ 1107.612062][ T9041] handle_mm_fault+0x48bb/0x9de0 [ 1107.612062][ T9041] do_user_addr_fault+0xb30/0x1520 [ 1107.612062][ T9041] ? kmsan_set_origin_checked+0x95/0xf0 [ 1107.612062][ T9041] __do_page_fault+0x18f/0x400 [ 1107.612062][ T9041] do_page_fault+0xbb/0x4e0 [ 1107.612062][ T9041] ? kmsan_unpoison_pt_regs+0x29/0x30 [ 1107.612062][ T9041] page_fault+0x4e/0x60 [ 1107.612062][ T9041] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 [ 1107.612062][ T9041] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 [ 1107.612062][ T9041] RSP: 0018:ffffaf869599fb10 EFLAGS: 00010202 [ 1107.612062][ T9041] RAX: ffffffff84a5fd79 RBX: ffff9139a0b3e550 RCX: 0000000000003133 [ 1107.612062][ T9041] RDX: 0000000000003ff3 RSI: ffff913aa6ce8ec0 RDI: 0000000020001000 [ 1107.612062][ T9041] RBP: ffffaf869599fb80 R08: ffffef804000000f R09: ffff913a6fffb000 [ 1107.612062][ T9041] R10: 0000000000000004 R11: 0000000000000000 R12: ffff913aa6ce8000 [ 1107.612062][ T9041] R13: ffffaf869599fb18 R14: 0000000020000140 R15: 0000000000003ff3 [ 1107.612062][ T9041] ? _copy_to_user+0x10c/0x1f0 [ 1107.612062][ T9041] drm_ioctl+0xceb/0x1230 [ 1107.612062][ T9041] ? drm_connector_property_set_ioctl+0x230/0x230 [ 1107.612062][ T9041] ? kmsan_get_metadata+0x11d/0x180 [ 1107.612062][ T9041] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1107.612062][ T9041] ? drm_ioctl_kernel+0x6f0/0x6f0 [ 1107.612062][ T9041] do_vfs_ioctl+0xd88/0x3060 [ 1107.612062][ T9041] ? kmsan_get_metadata+0x11d/0x180 [ 1107.612062][ T9041] ? security_file_ioctl+0x1a8/0x200 [ 1107.612062][ T9041] __se_sys_ioctl+0x1da/0x270 [ 1107.612062][ T9041] __x64_sys_ioctl+0x4a/0x70 [ 1107.612062][ T9041] do_syscall_64+0xb8/0x160 [ 1107.612062][ T9041] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1107.612062][ T9041] RIP: 0033:0x45b349 [ 1107.612062][ T9041] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1107.612062][ T9041] RSP: 002b:00007ff4f31bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1107.612062][ T9041] RAX: ffffffffffffffda RBX: 00007ff4f31bf6d4 RCX: 000000000045b349 [ 1107.612062][ T9041] RDX: 0000000020000140 RSI: fffffbfffff3ffa7 RDI: 0000000000000003 [ 1107.612062][ T9041] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1107.612062][ T9041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1107.612062][ T9041] R13: 00000000000001fe R14: 00000000004c2cfa R15: 0000000000000004 06:36:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f0000000040)={0x5ab, "12c7bf6bfd1b919d15f64384a881b766c5edda0809b063f03f16716e27d69d02"}) r1 = syz_open_pts(r0, 0x1) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) exit(0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) [ 1108.396759][ T9046] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1108.405007][ C1] sd 0:0:1:0: [sg0] tag#6629 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1108.406688][ T9046] ===================================================== [ 1108.416789][ C1] sd 0:0:1:0: [sg0] tag#6629 CDB: Test Unit Ready [ 1108.416176][ T9046] BUG: KMSAN: uninit-value in string+0x522/0x690 [ 1108.416176][ T9046] CPU: 0 PID: 9046 Comm: syz-executor.2 Not tainted 5.5.0-rc5-syzkaller #0 [ 1108.416176][ T9046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1108.416176][ T9046] Call Trace: [ 1108.416176][ T9046] dump_stack+0x1c9/0x220 [ 1108.416176][ T9046] kmsan_report+0xf7/0x1e0 [ 1108.416176][ T9046] __msan_warning+0x58/0xa0 [ 1108.416176][ T9046] string+0x522/0x690 [ 1108.416176][ T9046] vsnprintf+0x207d/0x31b0 [ 1108.416176][ T9046] ? kmsan_get_metadata+0x11d/0x180 [ 1108.430288][ C1] sd 0:0:1:0: [sg0] tag#6629 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1108.416176][ T9046] __request_module+0x2ad/0x11c0 [ 1108.416176][ T9046] ? netdev_run_todo+0x1533/0x1570 [ 1108.416176][ T9046] ? kmsan_get_metadata+0x11d/0x180 [ 1108.416176][ T9046] ? kmsan_set_origin_checked+0x95/0xf0 [ 1108.416176][ T9046] tcf_proto_lookup_ops+0x241/0x720 [ 1108.445443][ C1] sd 0:0:1:0: [sg0] tag#6629 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1108.416176][ T9046] tc_new_tfilter+0x2a4e/0x5010 [ 1108.416176][ T9046] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1108.416176][ T9046] ? security_capable+0x1cb/0x220 [ 1108.416176][ T9046] ? kmsan_get_metadata+0x11d/0x180 [ 1108.416176][ T9046] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1108.416176][ T9046] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1108.416176][ T9046] ? tcf_tunnel_encap_put_tunnel+0x40/0x40 [ 1108.416176][ T9046] rtnetlink_rcv_msg+0xcb7/0x1570 [ 1108.416176][ T9046] ? __local_bh_enable_ip+0x97/0x1d0 [ 1108.416176][ T9046] ? local_bh_enable+0x36/0x40 [ 1108.416176][ T9046] ? __dev_queue_xmit+0x3c75/0x4220 [ 1108.416176][ T9046] ? kmsan_get_metadata+0x11d/0x180 [ 1108.416176][ T9046] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1108.458996][ C1] sd 0:0:1:0: [sg0] tag#6629 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1108.416176][ T9046] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1108.416176][ T9046] ? kmsan_get_metadata+0x4f/0x180 [ 1108.416176][ T9046] ? kmsan_get_metadata+0x4f/0x180 [ 1108.416176][ T9046] ? kmsan_set_origin_checked+0x95/0xf0 [ 1108.416176][ T9046] ? kmsan_get_metadata+0x11d/0x180 [ 1108.416176][ T9046] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1108.416176][ T9046] netlink_rcv_skb+0x451/0x650 [ 1108.416176][ T9046] ? rtnetlink_bind+0x120/0x120 [ 1108.468009][ C1] sd 0:0:1:0: [sg0] tag#6629 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1108.416176][ T9046] rtnetlink_rcv+0x50/0x60 [ 1108.416176][ T9046] netlink_unicast+0xf9e/0x1100 [ 1108.416176][ T9046] ? rtnetlink_net_exit+0x90/0x90 [ 1108.416176][ T9046] netlink_sendmsg+0x1248/0x14d0 [ 1108.416176][ T9046] ? netlink_getsockopt+0x1440/0x1440 [ 1108.416176][ T9046] ____sys_sendmsg+0x12b6/0x1350 [ 1108.476600][ C1] sd 0:0:1:0: [sg0] tag#6629 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1108.416176][ T9046] __sys_sendmsg+0x451/0x5f0 [ 1108.486356][ C1] sd 0:0:1:0: [sg0] tag#6629 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1108.416176][ T9046] ? kmsan_copy_to_user+0x81/0x90 [ 1108.416176][ T9046] ? kmsan_get_metadata+0x11d/0x180 [ 1108.416176][ T9046] ? kmsan_get_metadata+0x11d/0x180 [ 1108.416176][ T9046] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1108.416176][ T9046] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1108.416176][ T9046] ? prepare_exit_to_usermode+0x1ca/0x520 [ 1108.416176][ T9046] __se_sys_sendmsg+0x97/0xb0 [ 1108.500850][ C1] sd 0:0:1:0: [sg0] tag#6629 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1108.416176][ T9046] __x64_sys_sendmsg+0x4a/0x70 [ 1108.416176][ T9046] do_syscall_64+0xb8/0x160 [ 1108.416176][ T9046] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1108.416176][ T9046] RIP: 0033:0x45b349 [ 1108.416176][ T9046] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1108.416176][ T9046] RSP: 002b:00007f1f17b1cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1108.416176][ T9046] RAX: ffffffffffffffda RBX: 00007f1f17b1d6d4 RCX: 000000000045b349 [ 1108.416176][ T9046] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000007 [ 1108.416176][ T9046] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1108.416176][ T9046] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1108.511309][ C1] sd 0:0:1:0: [sg0] tag#6629 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1108.416176][ T9046] R13: 00000000000009c8 R14: 00000000004cb338 R15: 000000000075bfd4 [ 1108.416176][ T9046] [ 1108.416176][ T9046] Uninit was created at: [ 1108.416176][ T9046] kmsan_internal_poison_shadow+0x66/0xd0 [ 1108.416176][ T9046] kmsan_slab_alloc+0x8a/0xe0 [ 1108.416176][ T9046] __kmalloc_node_track_caller+0xb40/0x1200 [ 1108.416176][ T9046] __alloc_skb+0x2fd/0xac0 [ 1108.416176][ T9046] netlink_sendmsg+0x7d3/0x14d0 [ 1108.522252][ C1] sd 0:0:1:0: [sg0] tag#6629 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1108.416176][ T9046] ____sys_sendmsg+0x12b6/0x1350 [ 1108.416176][ T9046] __sys_sendmsg+0x451/0x5f0 [ 1108.536783][ C1] sd 0:0:1:0: [sg0] tag#6629 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1108.416176][ T9046] __se_sys_sendmsg+0x97/0xb0 [ 1108.416176][ T9046] __x64_sys_sendmsg+0x4a/0x70 [ 1108.416176][ T9046] do_syscall_64+0xb8/0x160 [ 1108.416176][ T9046] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1108.416176][ T9046] ===================================================== [ 1108.416176][ T9046] Disabling lock debugging due to kernel taint [ 1108.416176][ T9046] Kernel panic - not syncing: panic_on_warn set ... [ 1108.416176][ T9046] CPU: 0 PID: 9046 Comm: syz-executor.2 Tainted: G B 5.5.0-rc5-syzkaller #0 [ 1108.416176][ T9046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1108.416176][ T9046] Call Trace: [ 1108.548012][ C1] sd 0:0:1:0: [sg0] tag#6629 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1108.416176][ T9046] dump_stack+0x1c9/0x220 [ 1108.416176][ T9046] panic+0x3d5/0xc3e [ 1108.416176][ T9046] kmsan_report+0x1df/0x1e0 [ 1108.416176][ T9046] __msan_warning+0x58/0xa0 [ 1108.416176][ T9046] string+0x522/0x690 [ 1108.416176][ T9046] vsnprintf+0x207d/0x31b0 [ 1108.559157][ C1] sd 0:0:1:0: [sg0] tag#6629 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1108.416176][ T9046] ? kmsan_get_metadata+0x11d/0x180 [ 1108.416176][ T9046] __request_module+0x2ad/0x11c0 [ 1108.416176][ T9046] ? netdev_run_todo+0x1533/0x1570 [ 1108.416176][ T9046] ? kmsan_get_metadata+0x11d/0x180 [ 1108.416176][ T9046] ? kmsan_set_origin_checked+0x95/0xf0 [ 1108.416176][ T9046] tcf_proto_lookup_ops+0x241/0x720 [ 1108.570980][ C1] sd 0:0:1:0: [sg0] tag#6629 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1108.416176][ T9046] tc_new_tfilter+0x2a4e/0x5010 [ 1108.416176][ T9046] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1108.416176][ T9046] ? security_capable+0x1cb/0x220 [ 1108.581492][ C1] sd 0:0:1:0: [sg0] tag#6629 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1108.416176][ T9046] ? kmsan_get_metadata+0x11d/0x180 [ 1108.416176][ T9046] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1108.416176][ T9046] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1108.416176][ T9046] ? tcf_tunnel_encap_put_tunnel+0x40/0x40 [ 1108.416176][ T9046] rtnetlink_rcv_msg+0xcb7/0x1570 [ 1108.416176][ T9046] ? __local_bh_enable_ip+0x97/0x1d0 [ 1108.416176][ T9046] ? local_bh_enable+0x36/0x40 [ 1108.591673][ C1] sd 0:0:1:0: [sg0] tag#6629 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 1108.416176][ T9046] ? __dev_queue_xmit+0x3c75/0x4220 [ 1108.416176][ T9046] ? kmsan_get_metadata+0x11d/0x180 [ 1108.416176][ T9046] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1108.416176][ T9046] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1108.416176][ T9046] ? kmsan_get_metadata+0x4f/0x180 [ 1108.416176][ T9046] ? kmsan_get_metadata+0x4f/0x180 [ 1108.416176][ T9046] ? kmsan_set_origin_checked+0x95/0xf0 [ 1108.416176][ T9046] ? kmsan_get_metadata+0x11d/0x180 [ 1108.696947][ T9046] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1108.696947][ T9046] netlink_rcv_skb+0x451/0x650 [ 1108.696947][ T9046] ? rtnetlink_bind+0x120/0x120 [ 1108.696947][ T9046] rtnetlink_rcv+0x50/0x60 [ 1108.696947][ T9046] netlink_unicast+0xf9e/0x1100 [ 1108.696947][ T9046] ? rtnetlink_net_exit+0x90/0x90 [ 1108.696947][ T9046] netlink_sendmsg+0x1248/0x14d0 [ 1108.696947][ T9046] ? netlink_getsockopt+0x1440/0x1440 [ 1108.696947][ T9046] ____sys_sendmsg+0x12b6/0x1350 [ 1108.696947][ T9046] __sys_sendmsg+0x451/0x5f0 [ 1108.696947][ T9046] ? kmsan_copy_to_user+0x81/0x90 [ 1108.696947][ T9046] ? kmsan_get_metadata+0x11d/0x180 [ 1108.696947][ T9046] ? kmsan_get_metadata+0x11d/0x180 [ 1108.696947][ T9046] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1108.696947][ T9046] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1108.696947][ T9046] ? prepare_exit_to_usermode+0x1ca/0x520 [ 1108.696947][ T9046] __se_sys_sendmsg+0x97/0xb0 [ 1108.696947][ T9046] __x64_sys_sendmsg+0x4a/0x70 [ 1108.696947][ T9046] do_syscall_64+0xb8/0x160 [ 1108.696947][ T9046] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1108.696947][ T9046] RIP: 0033:0x45b349 [ 1108.696947][ T9046] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1108.696947][ T9046] RSP: 002b:00007f1f17b1cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1108.696947][ T9046] RAX: ffffffffffffffda RBX: 00007f1f17b1d6d4 RCX: 000000000045b349 [ 1108.696947][ T9046] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000007 [ 1108.696947][ T9046] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1108.696947][ T9046] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1108.696947][ T9046] R13: 00000000000009c8 R14: 00000000004cb338 R15: 000000000075bfd4 [ 1108.696947][ T9046] Kernel Offset: 0x1b000000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 1108.696947][ T9046] Rebooting in 86400 seconds..